# us-exdsweb-io.pages.dev — MALICIOUS

> PhishDestroy analyzes us-exdsweb-io.pages.dev, a suspicious phishing domain under investigation. Stay alert and verify before interacting with it.

## Summary
PhishDestroy has identified the domain us-exdsweb-io.pages.dev as a potential generic phishing threat currently under investigation. The classification is based on behavioral indicators commonly associated with phishing attempts, although definitive malicious signatures remain to be confirmed.

Technically, this domain resolves to the IP address 188.114.96.3 and is registered via Cloudflare, Inc., a frequent hosting provider for legitimate and malicious sites alike. Notably, VirusTotal scans show zero detections among 95 security engines, suggesting the domain currently evades known signature-based detection. Despite this, the domain's recent registration and use of a pages.dev subdomain raise caution.

The status remains active, with ongoing monitoring by PhishDestroy. Due to the lack of direct detection by antivirus engines, analysts recommend heightened vigilance and caution when interacting with this domain. Further intelligence gathering and behavioral analysis are underway to better understand the threat posed by us-exdsweb-io.pages.dev.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Getting started with Exódus® Web3 Wallet — Exódus® Browser

## Domain Intelligence
- Registered: 2026-03-07 11:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: alberto.ns.cloudflare.com brynne.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "CyRadar", "Fortinet", "Kaspersky", "Phishing Database", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc7ce-135c-75b3-a646-905d9e50c20b.png
- Wayback Machine: https://web.archive.org/web/https://us-exdsweb-io.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/us-exdsweb-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/us-exdsweb-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/us-exdsweb-io.pages.dev/
Last updated: 2026-03-19