walte-exdaste[.]pages[.]dev

This domain, walte-exdaste.pages.dev, is flagged as a high-risk brand impersonation site targeting Exodus, a cryptocurrency wallet provider. The page title, 'Exodus Web3 Wallet — A Friendly Guide,' mimics legitimate Exodus branding to deceive users into interacting with fraudulent content. Analysis indicates the presence of a likely cryptocurrency drainer kit, designed to exfiltrate wallet credentials or private keys upon user engagement. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., with a creation date of May 06, 2024. It resolves to the IP address 188.114.97.3, located in Canada and associated with Cloudflare’s network. The domain is detected by 6 out of 95 security vendors on VirusTotal, appears on one security blocklist, and is currently blocked by at least one threat intelligence provider. The SSL certificate is issued by Google Trust Services, specifically the WE1 intermediate authority, which is commonly used for legitimate and malicious sites alike. As of the latest assessment, walte-exdaste.pages.dev remains active, posing an ongoing threat to users. While it is blocked by some security mechanisms, the domain continues to resolve and may evade detection in environments lacking updated threat intelligence. Users are advised to avoid interaction with this domain, verify wallet URLs through official sources, and employ browser-based security extensions or network-level blocking to mitigate exposure. The remaining risk is classified as high due to the domain’s persistence and direct targeting of cryptocurrency assets.