ex-os-deusweb[.]pages[.]dev

This domain, ex-os-deusweb.pages.dev, poses a high-risk threat through brand impersonation, specifically targeting the Exodus brand. The page title, 'Exodus Web3 Wallet® | Next-Gen Crypto Experience,' is crafted to deceive users into believing they are interacting with a legitimate crypto wallet service. This type of threat can lead to significant financial harm as users may unknowingly provide sensitive login information or transfer funds to fraudulent accounts.

Analysis indicates that ex-os-deusweb.pages.dev resolves to the IP address 188.114.96.3, which is associated with Cloudflare, Inc. in Canada. The domain was registered through Cloudflare, Inc., and its SSL certificate is issued by Google Trust Services / WE1. Currently, 8 out of 95 security vendors on VirusTotal have flagged this domain as malicious. Additionally, it appears on one security blocklist and is actively blocked by PhishDestroy. The domain was created on April 03, 2026, suggesting it is a newly established threat.

To mitigate the risks posed by this domain, users should be advised to verify the authenticity of websites before entering any personal or financial information. It is crucial to look for inconsistencies in domain names and ensure that SSL certificates are valid and issued by trusted authorities. Security teams should update their blocklists to include this domain and monitor for any traffic directed towards it. Educating users about the dangers of phishing and brand impersonation, especially in the context of cryptocurrency transactions, can further reduce the likelihood of successful attacks.