exodusweb-io-en[.]pages[.]dev

exodusweb-io-en.pages.dev is a confirmed brand impersonation phishing site targeting Exodus cryptocurrency wallet users. The domain is currently offline, having been taken down after being identified as a malicious impersonation of the legitimate Exodus platform. This phishing campaign attempted to steal credentials or private keys from unsuspecting visitors who believed they were accessing an official Exodus service.

Technical analysis reveals that exodusweb-io-en.pages.dev was flagged by 2 out of 95 VirusTotal security vendors and appeared on 3 separate security blocklists at the time of investigation. The domain was registered through Cloudflare, Inc. and created on March 06, 2026, resolving to IP address 172.66.47.54. The site's SSL certificate was issued by Google Trust Services (WE1), which is not uncommon for phishing sites that obtain free certificates to appear legitimate. The page title displayed 'Suspected phishing site | Cloudflare', indicating that Cloudflare's own security systems had already flagged the domain as malicious before it was taken offline.

Given the elevated risk level and confirmed impersonation of Exodus, users should never attempt to visit this domain or any similar variations. Those who may have interacted with this site should immediately change their Exodus wallet credentials and enable two-factor authentication. PhishDestroy recommends always verifying URL authenticity by manually typing known official addresses, using bookmarks, and avoiding links from unsolicited emails or messages. Stay vigilant against phishing campaigns targeting cryptocurrency users.