# exodus--web--3.pages.dev — SUSPICIOUS

> exodus--web--3.pages.dev poses as Exodus Web 3 Wallet. Learn why this domain is risky and what to watch for to protect your crypto assets.

## Summary
PhishDestroy identifies exodus--web--3.pages.dev as a medium-risk brand impersonation domain targeting the Exodus cryptocurrency wallet. This domain attempts to mimic the legitimate Exodus Web 3 Wallet site, potentially misleading users into divulging sensitive information or credentials. Brand impersonation is significant because it can facilitate credential theft, financial loss, and erosion of user trust in authentic services.

The domain was registered through Cloudflare, Inc. recently on March 4, 2026, and resolved to the IP address 172.66.47.163. VirusTotal flagged it with 4 detections from 95 security vendors, and it also appears on two security blocklists. Presently, the domain is offline, which limits immediate risk but users should remain vigilant as similar attacks may re-emerge with new domains.

Users are advised to access the Exodus Web 3 Wallet only through verified official channels. Avoid clicking on unsolicited links referencing the Exodus wallet and refrain from entering credentials on suspicious or unfamiliar websites. If users suspect they interacted with this domain, they should review their account security, enable two-factor authentication, and monitor for unauthorized activity. Staying informed and cautious is the best defense against brand impersonation schemes like this one.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Exodus Web 3 Wallet — Guide, Features & FAQs

## Domain Intelligence
- Registered: 2026-03-04 23:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.163
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: rachel.ns.cloudflare.com rajeev.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "Kaspersky", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/m58TWSqK/de36e6eec5ef.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/exodus--web--3.pages.dev
- Wayback Machine: https://web.archive.org/web/https://exodus--web--3.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/exodus--web--3.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exodus--web--3.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exodus--web--3.pages.dev/
Last updated: 2026-03-19