# exodus-ten-five.pages.dev — SUSPICIOUS

> Beware of exodus-ten-five.pages.dev, a phishing domain impersonating Exodus wallet. Stay vigilant and avoid interacting with this suspicious site.

## Summary
PhishDestroy has identified exodus-ten-five.pages.dev as a medium-risk brand impersonation domain targeting the Exodus crypto wallet. The domain was designed to deceive users by mimicking the legitimate Exodus Web3 Wallet® interface, aiming to mislead victims into compromising their credentials or assets.

Technical analysis reveals the domain was registered on March 4, 2026, via Cloudflare, Inc., and resolved to IP address 172.66.44.174. It was flagged by 3 out of 95 VirusTotal security vendors and appeared on two security blocklists, confirming its suspicious nature. The page title 'Exodus Web3 Wallet® | Next-Gen Crypto Experience' further supports its intent to impersonate the genuine Exodus brand.

Currently, exodus-ten-five.pages.dev is offline, indicating it has been taken down or suspended following detection. PhishDestroy advises users and organizations to remain cautious of similar lookalike domains and to verify URLs carefully before engaging with web3 wallet services.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Exodus Web3 Wallet® | Next-Gen Crypto Experience

## Domain Intelligence
- Registered: 2026-03-04 17:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.174
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: anastasia.ns.cloudflare.com bob.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "Kaspersky", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/Z6T5bxbc/2a45b7935f40.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/exodus-ten-five.pages.dev
- Wayback Machine: https://web.archive.org/web/https://exodus-ten-five.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/exodus-ten-five.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exodus-ten-five.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exodus-ten-five.pages.dev/
Last updated: 2026-03-19