exoduas-wellet[.]pages[.]dev

This domain, exoduas-wellet.pages.dev, carries an elevated risk level due to a confirmed brand impersonation threat targeting Exodus, a popular cryptocurrency wallet. The site masquerades as the official Exodus Web3 Wallet and even includes a misleading page title referencing the Exodus Browser Extension with Ledger support, aiming to trick users into entering sensitive credentials or private keys. Fortunately, the domain has been taken offline, but its prior activity and setup indicate a sophisticated phishing operation.

The domain was created on April 18, 2026, and registered through Cloudflare, Inc., which is often abused for its privacy and CDN services. It resolves to IP address 188.114.97.3, an IP associated with Cloudflare. Security scans reveal that 8 out of 95 antivirus engines on VirusTotal flagged the domain as malicious, and it appears on at least three security blocklists. The SSL certificate was issued by Google Trust Services, providing a false sense of security to visitors. PhishDestroy identified these indicators through its analysis, confirming the domain's fraudulent nature.

Users who have interacted with this domain should immediately change their Exodus wallet passwords and enable two-factor authentication if not already active. It is crucial to never reuse passwords across different services. Additionally, users should consider moving funds to a new wallet generated offline, as private keys may have been compromised. Always verify the official URL of Exodus (exodus.com) before entering any sensitive information, and report any suspicious domains to relevant security platforms to help protect others in the crypto community.