# exoxdus-web.pages.dev — MALICIOUS

> Exoxdus-web.pages.dev is under investigation for potential phishing activity. Stay alert and avoid sharing personal info. Learn more now.

## Summary
PhishDestroy identifies exoxdus-web.pages.dev as a domain currently under investigation for generic phishing threats. Although it has not yet been flagged by major security vendors, the potential risk of credential theft or fraud makes vigilance critical for users encountering this site.

The domain is registered through Cloudflare, Inc. and resolves to the IP address 172.66.47.157. VirusTotal scans show no current detections, but the domain’s status remains active and suspicious due to its hosting setup and nature, prompting further monitoring and analysis.

Users are advised to exercise caution by not entering personal or financial details on this domain. PhishDestroy recommends verifying URLs carefully before interaction and reporting any suspicious activity linked to exoxdus-web.pages.dev to your security team or through phishing reporting platforms.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Getting started with Exodus Web3 Wallet

## Domain Intelligence
- Registered: 2026-03-07 11:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.157
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: jessica.ns.cloudflare.com lamar.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "BitDefender", "CyRadar", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Phishing Database", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc7cd-a1f4-72de-8788-f031ddc54980.png
- Wayback Machine: https://web.archive.org/web/https://exoxdus-web.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/exoxdus-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exoxdus-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exoxdus-web.pages.dev/
Last updated: 2026-03-19