i-exodusweb3[.]pages[.]dev

Analysis of i-exodusweb3.pages.dev shows a domain created on February 21, 2026 and hosted behind Cloudflare’s network, resolving to the IP address 188.114.97.3 located in Canada. The domain is registered through Cloudflare, Inc. and uses Cloudflare‑provided name servers jack.ns.cloudflare.com and susan.ns.cloudflare.com. TLS enforcement is indicated by the presence of HTTP Strict Transport Security (HSTS), and the service supports HTTP/3, confirming a modern web stack. An HTTP request to the root URL returns a 403 status code, and the site is currently listed as offline.

Threat intelligence flags the domain as a crypto‑related scam that impersonates the Exodus brand, a well‑known cryptocurrency wallet provider. VirusTotal scans have identified the domain as malicious in 11 of 93 security vendor engines, and it appears on at least one external blocklist. Independent phishing mitigation service PhishDestroy has also blocked the domain, and the Gridinsoft trust score is recorded as 0 out of 100, reinforcing the malicious assessment.

The combination of brand impersonation, the crypto scam classification, and the low trust metrics suggests that the domain was intended to lure victims into disclosing cryptocurrency credentials or transferring funds. Defenders should continue to block the domain at perimeter and endpoint layers, monitor DNS queries for the name servers and IP address, and add the indicator to threat‑intel feeds. Because the site is offline, active content analysis is not possible, but the existing metadata provides sufficient evidence for remediation and for alerting users of the Exodus brand about this fraudulent domain.