help-exodus-io[.]pages[.]dev

This domain, help-exodus-io.pages.dev, is identified as a brand impersonation threat targeting users of the Exodus cryptocurrency wallet. The site presents itself as an official Exodus browser extension, using the page title 'Exodus® Web3 Wallet | Exódus® Browser Extension' to deceive visitors into believing it is legitimate. Such infrastructure is commonly used to harvest wallet credentials, private keys, or install malicious software under the guise of trusted services. Analysis indicates the domain was registered on February 22, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. Security vendors on VirusTotal flagged this domain, with 8 out of 95 detecting it as malicious. The domain appears on three security blocklists and is blocked by multiple security tools, including MetaMask and SEAL. The SSL certificate is issued by Google Trust Services, and the site employs technologies such as HSTS, Cloudflare, and HTTP/3, which may be leveraged to evade detection or enhance perceived legitimacy. Users who visited help-exodus-io.pages.dev should assume their credentials or wallet information may have been compromised. Immediate actions include revoking access to any connected wallets, transferring assets to a new secure wallet, and scanning the device for malware. Browser extensions or applications downloaded from this domain should be removed, and passwords for associated accounts should be changed. Monitoring for unauthorized transactions or account activity is strongly advised.