home-exo-en[.]pages[.]dev

The domain home-exo-en.pages.dev was registered on March 01 2026 through Cloudflare, Inc. It resolves to IP address 188.114.96.3, which belongs to AS13335 Cloudflare and is geolocated in the United States. Current HTTP response is 403 and the site is offline. TLS is provided by a Google Trust Services WE1 certificate, and the infrastructure advertises HSTS, Cloudflare, and HTTP/3 support. The authoritative nameservers are adi.ns.cloudflare.com, donna.ns.cloudflare.com, karl.ns.cloudflare.com, matteo.ns.c. The only observed page title is "Exodus Web3 Wallet - Your Gateway to the Decentralized Web," indicating an attempt to impersonate the Exodus Web3 Wallet brand.

The domain is classified as a brand impersonation scam. Reputation metrics are extremely low, with Scamadviser scoring 1/100 and Gridinsoft scoring 0/100. It appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis records five of ninety‑three security vendors flagging the domain. These concrete indicators collectively suggest a high probability of malicious activity aimed at deceiving users of Exodus or related Web3 services.

Uncertainty remains about the specific payload or credential‑collection mechanisms because the site is currently offline and no page content has been captured. Defenders should add the domain and its IP to internal deny lists, monitor DNS queries for the hostname, and enforce TLS inspection to catch any future re‑hosting attempts. Correlating future observations with the observed SSL certificate fingerprint and Cloudflare‑derived IP range will aid detection, as attackers may reuse the same CDN infrastructure. Continuous tracking of the listed blocklists and of threat‑intel feeds covering AS13335 is recommended to detect re‑emergence. Users of Exodus wallet should be warned about this impersonation attempt and instructed to verify URLs against official sources before entering any credentials.