webpage-exodusweb3[.]pages[.]dev

The domain webpage-exodusweb3.pages.dev was a cryptocurrency phishing site engaged in brand impersonation targeting Exodus wallet users. It posed as a legitimate Exodus service to deceive victims into disclosing sensitive information or transferring cryptocurrency, though no specific drainer kit was identified. The site is currently taken offline, but its prior activity classifies it as an elevated-risk scam.

Technical indicators confirm the domain's malicious nature. webpage-exodusweb3.pages.dev was flagged by 1 of 95 VirusTotal security vendors, including ChainPatrol, and appeared on 3 security blocklists (PhishDestroy, MetaMask, and SEAL). Registered through Cloudflare, Inc. on March 11, 2026, it resolved to the IP address 172.66.44.169, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title matched the domain name. Technologies detected included HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with webpage-exodusweb3.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new wallet. Monitor transaction history for unauthorized activity and report the domain to platforms like ChainPatrol, MetaMask’s threat repository, or the Anti-Phishing Working Group (APWG). Enable two-factor authentication on all cryptocurrency accounts and remain vigilant for follow-up phishing attempts via email or social media.