# exo-dos-protectweb3.pages.dev — MALICIOUS

> Explore the risks linked to exo-dos-protectweb3.pages.dev, a domain under phishing investigation. Stay alert and protect your data now.

## Summary
PhishDestroy identifies exo-dos-protectweb3.pages.dev as a suspicious domain currently under investigation for generic phishing activity. While no direct security vendor detections have been recorded at this time, the domain’s behavior and context have raised concerns warranting closer scrutiny. Users are advised to exercise caution when encountering this domain, as it may attempt to deceive visitors into revealing sensitive information.

Technically, exo-dos-protectweb3.pages.dev is hosted via Cloudflare, Inc., benefiting from their content delivery and protection infrastructure. The domain resolves to IP address 188.114.97.3, which may be monitored for unusual traffic patterns or connections related to phishing campaigns. VirusTotal scans show zero detections, indicating no current known malware or phishing signatures, but this does not guarantee safety given the domain’s recent emergence and potential for rapid changes.

Currently, the domain remains active and under ongoing analysis at PhishDestroy. Users should avoid interacting with it until further verification confirms legitimacy. It is recommended to report any suspicious activity linked to this domain to security teams and maintain up-to-date security software. Continuous monitoring will help determine if exo-dos-protectweb3.pages.dev poses a genuine threat or a false positive in this evolving investigation.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Exodus Web3 Wallet ® | Secure Crypto Freedom ™

## Domain Intelligence
- Registered: 2026-03-05 17:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: fonzie.ns.cloudflare.com michelle.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ChainPatrol", "CyRadar", "Fortinet", "Kaspersky", "Phishing Database", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbe8f-b65e-7380-a616-940b59a5f4df.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/exo-dos-protectweb3.pages.dev
- Wayback Machine: https://web.archive.org/web/https://exo-dos-protectweb3.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/exo-dos-protectweb3.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exo-dos-protectweb3.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exo-dos-protectweb3.pages.dev/
Last updated: 2026-03-19