exodusweb3-uss[.]pages[.]dev

The domain exodusweb3-uss.pages.dev is a phishing site engaged in brand impersonation targeting Exodus, a cryptocurrency wallet provider. It presents itself as a legitimate Exodus Web3 wallet guide but is designed to harvest seed phrases or login credentials from victims, a threat type known as seed phishing. No drainer kit was identified. As of the latest verification, exodusweb3-uss.pages.dev has been taken offline, though prior activity remains a risk for those who interacted with it.

Technical indicators confirm the elevated risk. The domain was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and alphaMountain.ai, and appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through Cloudflare, Inc. on March 02, 2026, it resolved to the IP address 172.66.44.143, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Exodus Web3 Wallet — A Complete Guide'. Technologies detected include HSTS, Cloudflare, and HTTP/3. Gridinsoft assigned a trust score of 0/100, and the domain currently returns an HTTP 403 status.

Victims who entered seed phrases or passwords on exodusweb3-uss.pages.dev should immediately revoke all token approvals and transfer funds to a new, secure wallet. Change any compromised passwords, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or login attempts. Report the phishing domain to the impersonated brand, Exodus, and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to prevent further abuse.