exo--dusweb3[.]pages[.]dev

This domain, exo--dusweb3.pages.dev, is flagged as an investment scam following analysis of its infrastructure and detection status. Registered on March 22, 2026, through Cloudflare, Inc., the domain resolves to IP 188.114.96.3, hosted under Cloudflare’s Canadian ASN. The HTTP response is a 403 status, and the page title explicitly states 'Suspected phishing site | Cloudflare,' indicating automated detection by the hosting provider. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is classified as an investment scam based on available intelligence. Nine of 94 security vendors on VirusTotal flagged the domain, though the specific detection rules or payloads are not detailed in the current data.

Technologies detected include HSTS, Cloudflare CDN, and HTTP/3, suggesting modern web infrastructure. The SSL certificate is issued by Google Trust Services (WE1), a common provider for Cloudflare-hosted domains. Nameservers (reza.ns.cloudflare.com, troy.ns.cloudflare.com) confirm Cloudflare as the DNS provider. The Gridinsoft trust score of 0/100 aligns with the domain’s malicious classification. Defenders should treat this domain as confirmed malicious, particularly for financial or investment-related fraud.

The 403 status indicates the site may be temporarily disabled, but historical DNS and WHOIS records should be reviewed for prior activity. Blocklisting at the DNS or proxy level is recommended, and any related emails, redirects, or affiliated domains should be investigated for connections to this infrastructure. Given the Cloudflare hosting, additional subdomains or rapid rehosting attempts may occur. No brand impersonation details are available beyond the investment scam classification, so monitoring for similar patterns under Cloudflare’s *.pages.dev namespace is advised.