exo--dusweb-un[.]pages[.]dev

The domain exo--dusweb-un.pages.dev is a confirmed generic phishing site designed to steal user credentials through credential phishing tactics. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, exo--dusweb-un.pages.dev has been taken offline, but it previously posed an elevated risk to users who may have interacted with it.

Technical analysis shows that exo--dusweb-un.pages.dev was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and Phishing Database. It appears on 3 security blocklists, specifically PhishDestroy, MetaMask, and SEAL. The domain was registered through Cloudflare, Inc. on March 04, 2026, and resolved to the IP address 172.66.45.46, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. The domain uses Cloudflare nameservers (anderson.ns.cloudflare.com and piper.ns.cloudflare.com) and returned an HTTP 403 status when accessed. Gridinsoft assigned it a trust score of 0/100.

Users who may have entered credentials on exo--dusweb-un.pages.dev should immediately change passwords for any accounts accessed during the interaction, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or crypto-related details were exposed, contact relevant institutions and consider additional security measures such as revoking token approvals or transferring funds to a new wallet.