# exodusweb3-us.pages.dev — SUSPICIOUS

> PhishDestroy identifies exodusweb3-us.pages.dev as a fake Exodus wallet site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies exodusweb3-us.pages.dev as an active brand impersonation domain posing as the legitimate Exodus cryptocurrency wallet service. This threat is currently under investigation but remains accessible to unwary users. The fraudulent site exploits the trusted reputation of the Exodus brand to deceive users into entering sensitive wallet credentials or downloading malicious software under the guise of official updates. It shares no affiliation with Exodus Wallet GmbH and is designed solely to facilitate financial theft or credential harvesting. Given the active status and lack of detection on major scanning platforms, users are strongly advised to avoid this domain entirely.


This domain was flagged with zero detections out of 95 VirusTotal scanners as of the latest scan, indicating it has evaded immediate detection by antivirus engines. It resolves to the IP address 172.66.47.145 via Cloudflare, Inc., and is served under a Google Trust Services SSL certificate, lending a false air of legitimacy. The use of a legitimate CDN and SSL provider highlights the sophistication of this campaign, which leverages trusted infrastructure to bypass traditional security filters. While the creation date is not publicly listed in available intelligence, the absence of flags across blocklists and scanning engines suggests recent deployment or delayed recognition by security systems. The combination of low detection rates and reliance on reputable web infrastructure poses a significant risk to cryptocurrency users seeking legitimate financial services.


To mitigate exposure to this impersonation threat, users should verify URLs manually by checking for the official exodus.com domain and reviewing verified social media or support channels before entering any credentials. Block the IP 172.66.47.145 and domain exodusweb3-us.pages.dev at the network or DNS level using enterprise firewalls or host file entries. Report the domain to Cloudflare Abuse and Exodus support teams to hasten takedown efforts. Enable hardware-based wallet authentication or multi-factor authentication on all cryptocurrency accounts to limit potential damage from credential theft. Always use only verified, bookmarked links for official wallet access and never trust domains containing extraneous terms like "web3" or "us" as signs of legitimacy.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Exodus

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.145

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1e73b1bd-8cae-42cf-b9e2-b04c67075285
- PhishDestroy: https://phishdestroy.io/domain/exodusweb3-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exodusweb3-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exodusweb3-us.pages.dev/
Last updated: 2026-03-23