home-exdua-webdocs[.]pages[.]dev

This domain is a high-risk brand impersonation site targeting users of the Exodus cryptocurrency wallet. The page displays a fraudulent interface titled 'Exodus Web 3 Wallet® | Getting Started with Exodus Web,' designed to mimic the legitimate Exodus Web3 wallet login. The goal is to deceive visitors into entering sensitive credentials, such as recovery phrases or private keys, which attackers can then harvest for unauthorized access to cryptocurrency funds. The site is actively serving malicious content and has been flagged by multiple security entities as a direct threat to digital asset security.

Analysis indicates the domain was registered on March 01, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.125, also operated by Cloudflare. It appears on three security blocklists, including those maintained by cryptocurrency security providers. VirusTotal reports that 2 out of 95 security vendors have detected this domain as malicious, confirming its use in phishing operations. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy to unsuspecting users.

If you visited home-exdua-webdocs.pages.dev and entered any credentials or recovery information, immediately cease all interaction with the site. Revoke any connected wallet sessions and transfer assets to a new, secure wallet using a fresh recovery phrase. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant security teams and consider notifying the legitimate service being impersonated to aid in broader threat mitigation efforts.