# en-exodusweb3-us.pages.dev — MALICIOUS

> Explore the phishing risk and current status of en-exodusweb3-us.pages.dev, a low-risk but active generic phishing domain.

## Summary
PhishDestroy identifies en-exodusweb3-us.pages.dev as an active domain associated with generic phishing activity, assessed at a low risk level. This classification reflects the domain's limited threat impact but warrants cautious monitoring due to its ongoing presence in the threat landscape.

Supporting evidence for this assessment includes detection by 2 out of 95 security vendors on VirusTotal and registration through Cloudflare, Inc., a common provider used to mask origin. The domain resolves to IP address 188.114.97.3 and remains accessible, reinforcing its status as an active phishing source. The low detection ratio suggests the campaign may be emerging or narrowly targeted.

To mitigate risks, users and organizations should avoid interacting with this domain and employ updated web filtering solutions. Continuous monitoring is recommended as the domain is still operational. PhishDestroy will maintain observation of en-exodusweb3-us.pages.dev to detect any escalation in threat level or broader malicious activity.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: elmo.ns.cloudflare.com natasha.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ChainPatrol", "CyRadar", "Fortinet", "Kaspersky", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/tMkLZq5D/77fdac2885a8.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e5117cf8-a368-42a4-826e-9ecd1c74b78e
- Wayback Machine: https://web.archive.org/web/https://en-exodusweb3-us.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/en-exodusweb3-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-exodusweb3-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-exodusweb3-us.pages.dev/
Last updated: 2026-03-19