home-us-e-xoss[.]pages[.]dev

This domain is assessed as HIGH risk due to confirmed brand impersonation activity targeting the Exodus Web3 wallet ecosystem. The infrastructure is consistent with credential harvesting or crypto drainer deployment, leveraging presentation-style pages to mislead users into interacting with wallet connection prompts.

Telemetry indicates VirusTotal detection coverage of 10/95 security vendors, reflecting moderate-to-high consensus on malicious behavior. The domain is registered through Cloudflare Pages infrastructure and resolves to IP 172.66.44.147 under Cloudflare, Inc. (CA). SSL is issued via Google Trust Services (WE1). The domain was created on March 24, 2026. It is currently active, appears on 1 security blocklist, and is flagged by PhishDestroy, confirming external detection alignment.

Mitigation requires immediate blocking of the domain at DNS and endpoint levels and classification as a crypto phishing asset. Users should avoid entering seed phrases, private keys, or signing any wallet transactions on the page. Security monitoring should focus on Cloudflare Pages subdomain abuse patterns and rapid redeployment behavior. Any interaction history with the domain should be treated as potential compromise, with wallet migration and revocation of approvals recommended where applicable.