# exodus-doweb.pages.dev — SUSPICIOUS

> Warning: exodus-doweb.pages.dev impersonates Exodus brand and is flagged as suspicious. Avoid interacting as it is currently offline.

## Summary
PhishDestroy assesses exodus-doweb.pages.dev as a low-risk brand impersonation threat targeting Exodus users. The domain was identified as a suspected phishing site designed to mimic the Exodus brand.

Evidence includes its registration through Cloudflare, Inc. on March 4, 2026, and resolution to IP 188.114.96.3. It has appeared on two security blocklists and was flagged by one out of 95 VirusTotal vendors. The page title itself indicated suspicion via Cloudflare.

Currently, exodus-doweb.pages.dev is offline, reducing immediate risk. Nonetheless, users should remain vigilant and avoid interacting with this domain. PhishDestroy recommends continued monitoring for potential reactivation or similar impersonation attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 23:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: kareem.ns.cloudflare.com nova.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["ChainPatrol"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbaeb-a643-77ee-9689-80413c36d080.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/exodus-doweb.pages.dev
- Wayback Machine: https://web.archive.org/web/https://exodus-doweb.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/exodus-doweb.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exodus-doweb.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exodus-doweb.pages.dev/
Last updated: 2026-03-19