# exod-web3.pages.dev — SUSPICIOUS

> exod-web3.pages.dev is a live crypto drainer scam detected by 1 of 95 VirusTotal vendors. Google-hosted page pushes fake wallet drainers.

## Summary
PhishDestroy identifies exod-web3.pages.dev as an active crypto-draining phishing page hosted on Cloudflare Pages under Google Trust Services SSL. This site was registered through Cloudflare, Inc. and currently resolves to IP address 188.114.97.3. One out of ninety-five VirusTotal security vendors has already flagged the domain as malicious, indicating an elevated risk of immediate financial theft if users connect wallets or enter seed phrases.  

 This domain poses a direct threat to cryptocurrency users by impersonating a legitimate Web3 interface—likely targeting Exodus Wallet users—while disguising itself behind Cloudflare Pages and a Google-issued SSL certificate to appear authentic. PhishDestroy analysis shows the page is part of a live operation: only 1 security vendor detected it at time of writing, meaning most antivirus tools have not yet updated signatures. The hosting infrastructure (Cloudflare Pages) and SSL provider (Google Trust Services) are commonly abused by threat actors to evade browser warnings and build trust with potential victims. Technical artifacts such as the domain's Cloudflare registration and the specific IP resolution (188.114.97.3) confirm it is part of a dynamic infrastructure cluster used in ongoing campaigns.  

 If you visited exod-web3.pages.dev or connected your wallet, immediately disconnect and revoke any connected permissions through your wallet’s app or official website. Do not enter any seed phrases, private keys, or recovery information on this site. Run a full antivirus scan using updated tools and consider transferring remaining assets to a clean wallet via a verified, official application. Report the incident to the legitimate service (e.g., Exodus Wallet support) and your local cybercrime unit. Stay alert: this scam is active and spreading under trusted hosting and SSL layers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/bfc39e43-b1f6-459d-90aa-2fc0cc578bf0
- PhishDestroy: https://phishdestroy.io/domain/exod-web3.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exod-web3.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exod-web3.pages.dev/
Last updated: 2026-03-22