# us-exxodus-web.pages.dev — MALICIOUS

> Beware of us-exxodus-web.pages.dev, a suspicious site mimicking Exodus Wallet to steal credentials. Stay informed and protect your crypto assets now.

## Summary
PhishDestroy identifies us-exxodus-web.pages.dev as an active phishing domain impersonating the Exodus cryptocurrency wallet platform. This type of threat is critical as it aims to deceive users into revealing sensitive information such as login credentials, potentially leading to unauthorized access and loss of funds.

The domain was registered via Cloudflare, Inc. and resolves to the IP address 172.66.44.252. VirusTotal analysis shows a low detection rate, with only 2 out of 95 security vendors flagging it, indicating that it may still evade some traditional security tools. The use of a Cloudflare Pages subdomain suggests it leverages free hosting to reduce traceability and increase its reach.

Users are advised to avoid interacting with us-exxodus-web.pages.dev and to verify URLs carefully before entering any personal or financial information. It is recommended to access Exodus Wallet only through official channels and bookmarks. If any credentials were submitted, immediate password changes and enabling two-factor authentication are crucial steps to mitigate potential harm.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.252
- Nameservers: noor.ns.cloudflare.com tony.ns.cloudflare.com

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ChainPatrol", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/jkSNrMpv/833f1b931330.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bfb2096b-f8d9-44ba-99ba-27667ed04cb0
- PhishDestroy: https://phishdestroy.io/domain/us-exxodus-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/us-exxodus-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/us-exxodus-web.pages.dev/
Last updated: 2026-03-19