# host-exxods.pages.dev — MALICIOUS

> host-exxods.pages.dev is under investigation for phishing. Avoid sharing personal info or credentials on this site until its safety is confirmed.

## Summary
PhishDestroy identifies host-exxods.pages.dev as a domain linked to potential phishing activity, currently under investigation. Although this domain has not yet been detected by any security vendors on VirusTotal, the domain's suspicious registration through Cloudflare and its recent emergence raise concerns. Users should be aware that phishing sites often mimic legitimate services to trick visitors into revealing sensitive data.

This phishing domain operates by hosting deceptive pages that may impersonate trusted brands or services. Visitors might be prompted to enter login credentials, payment details, or other private information under false pretenses. Since the domain resolves to an IP address associated with Cloudflare's network, attackers could be leveraging their infrastructure to anonymize their location and evade detection.

If someone has visited host-exxods.pages.dev, it is crucial to refrain from entering any personal information. Users should immediately change passwords for any accounts that might have been compromised and monitor financial statements for unusual activity. Employing security tools to scan devices and reporting the domain to security platforms can help protect others from falling victim to this phishing attempt.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP ?)
- Page title: Official Site® | Exodus Web3 Wallet® | Getting Started

## Domain Intelligence
- Registered: 2026-03-10 23:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.108
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: adelaide.ns.cloudflare.com sri.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "Kaspersky", "Phishing Database", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Live Page Content

### Page Text
Suspected phishing site | Cloudflare Please enable
      cookies. Warning Suspected Phishing This website has been reported for potential phishing. Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source. Learn More Cloudflare Ray ID: 9dc8f4935f51ee59 • Your IP: Click to reveal 104.28.162.239 • Performance & security by Cloudflare

### External Scripts
- https://challenges.cloudflare.com/turnstile/v0/api.js

### External Links
- https://www.cloudflare.com/learning/access-management/phishing-attack/
- https://www.cloudflare.com/5xx-error-landing

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd9fd-974b-70b6-ae17-d72176c09bc9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/8aa58b52-34f4-48ee-b7e9-f6148ff6784d
- PhishDestroy: https://phishdestroy.io/domain/host-exxods.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/host-exxods.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/host-exxods.pages.dev/
Last updated: 2026-03-15