eng-web3--exxods[.]pages[.]dev

This domain, eng-web3--exxods.pages.dev, is flagged as a brand impersonation threat targeting Exodus cryptocurrency wallet users. The site mimics the legitimate Exodus wallet interface, presenting itself as 'Exodus Wallet — Secure Multi-Asset Cryptocurrency Wallet.' Visitors are likely to encounter fake login pages or crypto drainer scripts designed to steal private keys, seed phrases, or directly siphon funds from connected wallets. The site employs convincing visuals and branding to deceive users into disclosing sensitive credentials or approving malicious transactions. Analysis indicates the domain was registered through Cloudflare, Inc. on March 26, 2026, though this date may reflect a placeholder or misconfiguration. It resolves to the IP address 188.114.97.3 and employs security technologies such as HSTS and HTTP/3, likely inherited from the hosting provider. Despite its deceptive appearance, the domain currently shows 0 detections out of 95 engines on VirusTotal, suggesting it has not yet been widely flagged by automated scanning systems. It appears on 3 security blocklists and is actively blocked by at least three independent threat intelligence feeds, including MetaMask and PhishDestroy. If you visited eng-web3--exxods.pages.dev or interacted with its content, immediate action is required. Disconnect any wallets or devices that were connected to the site. Revoke all active session approvals and smart contract permissions using a blockchain explorer or wallet management tool. Monitor your wallet for unauthorized transactions and consider transferring assets to a new, secure wallet if you entered private keys or seed phrases. Report the domain to your wallet provider and relevant security teams to aid in broader mitigation efforts. Avoid reusing passwords or recovery phrases across platforms to prevent further exposure.