exxod-sweb-us[.]pages[.]dev

The domain exxod-sweb-us.pages.dev has been identified as a significant threat due to its brand impersonation of Exodus. This domain poses a high risk of misleading users into believing they are interacting with the legitimate Exodus Web3 wallet infrastructure, potentially leading to credential theft and unauthorized access to user accounts. There is no indication that this domain utilizes a known drainer kit, which increases the necessity for user awareness when engaging with this site.

Technical analysis reveals that the domain has a VirusTotal score of 2/95, indicating a low detection rate among security vendors. It is registered through Cloudflare Pages and resolves to an IP address of 188.114.96.3, located in CA and operated by CloudFlare, Inc. The domain was created on March 27, 2026, and is currently listed on one security blocklist. The domain has been flagged by PhishDestroy, indicating active mitigation efforts against its use in phishing activities.

The current status of exxod-sweb-us.pages.dev remains active, representing an ongoing risk for users. Response actions have been initiated by security services, but the domain continues to be accessible. The presence of an SSL certificate issued by Google Trust Services indicates an effort to appear legitimate. Users are advised to exercise caution and verify URLs before entering any sensitive information, as the infrastructure remains a threat to personal and financial data linked to the Exodus brand.