# exodusweb3-cdn-pro.pages.dev — SUSPICIOUS

> exodusweb3-cdn-pro.pages.dev impersonates Exodus but is currently offline. Learn about the low-risk brand impersonation flagged by security blocklists.

## Summary
PhishDestroy identifies exodusweb3-cdn-pro.pages.dev as a low-risk brand impersonation domain targeting Exodus. The domain was created on March 3, 2026, and aimed to deceive users by mimicking the Exodus brand.

The domain resolved to IP 172.66.45.20 and was registered via Cloudflare, Inc. It appeared on three security blocklists and was flagged by 2 out of 95 VirusTotal security vendors. The page title detected was “Suspected phishing site | Cloudflare.”

Currently, the domain is offline and no longer poses an active threat. Users are advised to remain vigilant for similar impersonation attempts and verify URLs carefully before interacting with sites claiming to represent Exodus.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-03 23:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.45.20
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: jake.ns.cloudflare.com vita.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ChainPatrol", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb5b3-7ae1-745e-9515-2815ff2e7620.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/0d043cb1-b4b9-4bd8-bfce-8d9fb1266aa3
- Wayback Machine: https://web.archive.org/web/https://exodusweb3-cdn-pro.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/exodusweb3-cdn-pro.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exodusweb3-cdn-pro.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exodusweb3-cdn-pro.pages.dev/
Last updated: 2026-03-19