# docs-exdus-web3-en.pages.dev — SUSPICIOUS

> PhishDestroy identifies docs-exdus-web3-en.pages.dev as a credential theft site; VirusTotal flags show 3/95 vendors detected it.

## Summary
PhishDestroy flags docs-exdus-web3-en.pages.dev as an active crypto-draining credential theft page designed to trick visitors into surrendering private wallet keys or seed phrases. This site masquerades as a legitimate Web3 onboarding portal but is engineered to steal cryptocurrency assets by harvesting credentials and triggering unauthorized transfers. Visitors who connect a wallet or enter seed phrases risk immediate loss of funds to attacker-controlled addresses.

This domain was first observed on 2024-05-22 and is registered through Cloudflare, Inc. The SSL certificate is issued by Google Trust Services; however, 3 of 95 VirusTotal security vendors already flag it as malicious. Infrastructure points to 188.114.96.3, a Cloudflare fronted IP used for low-reputation hosting.

If you visited this site, revoke any wallet connections immediately using your wallet’s connection manager or a reputable revocation tool. Transfer remaining assets to a fresh wallet that was never linked to this domain, then run a malware scan on the device you used. Report the domain to your antivirus vendor and consider enabling multi-factor authentication and hardware wallet signing for all future crypto transactions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/28a7326a-6676-4754-866a-c4de2b97ff3a
- PhishDestroy: https://phishdestroy.io/domain/docs-exdus-web3-en.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/docs-exdus-web3-en.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/docs-exdus-web3-en.pages.dev/
Last updated: 2026-03-22