# home-exadua.pages.dev — MALICIOUS

> Beware of home-exadua.pages.dev impersonating Exodus wallet. Avoid interaction and verify official sources to protect your Web3 assets.

## Summary
PhishDestroy has identified the domain home-exadua.pages.dev as a medium-risk brand impersonation threat targeting Exodus, a popular Web3 wallet. This domain was designed to mimic the official Exodus Web3 Wallet presentation page, potentially misleading users into divulging sensitive information or downloading malicious content. Brand impersonation poses a significant risk by exploiting user trust in legitimate services, which can lead to credential theft or financial loss.

The domain home-exadua.pages.dev was registered recently on March 5, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. It appeared on two security blocklists and was flagged by 6 out of 95 security vendors on VirusTotal, indicating some detection of malicious activity or suspicious characteristics. The site has since been taken offline, reducing immediate risk but highlighting the importance of vigilance as similar domains may emerge.

Users are advised to avoid visiting home-exadua.pages.dev and to always verify URLs directly from official Exodus communications or trusted sources. Do not enter sensitive credentials or download files from suspicious pages. If users suspect they have interacted with this domain or similar malicious sites, they should update their passwords immediately and monitor their accounts for unauthorized activity. Staying informed and cautious is key to safeguarding digital assets in the evolving Web3 landscape.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Exodus Web3 Wallet — Official Presentation

## Domain Intelligence
- Registered: 2026-03-05 17:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: kianchau.ns.cloudflare.com meera.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ChainPatrol", "CyRadar", "Fortinet", "Kaspersky", "Phishing Database", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbe8f-b63b-700d-ac7c-9e2c5adc4872.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/home-exadua.pages.dev
- Wayback Machine: https://web.archive.org/web/https://home-exadua.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/home-exadua.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/home-exadua.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/home-exadua.pages.dev/
Last updated: 2026-03-19