# web-ex-dus-io.pages.dev — MALICIOUS

> Warning: web-ex-dus-io.pages.dev impersonated Exodus Web3 Wallet. Avoid interacting with this domain as it has been taken offline for safety.

## Summary
PhishDestroy identifies web-ex-dus-io.pages.dev as a medium-risk brand impersonation domain targeting the Exodus Web3 Wallet user base. The site presented itself as a legitimate platform to manage, swap, and explore DeFi assets securely, aiming to deceive users into trusting the fake interface.

The domain was registered on March 4, 2026, through Cloudflare, Inc. and resolved to IP address 188.114.97.3. It was flagged by 5 out of 95 security vendors on VirusTotal and appeared on 2 known security blocklists, indicating some consensus on its suspicious behavior. The use of Cloudflare infrastructure suggests an attempt to leverage trusted hosting for credibility.

Currently, web-ex-dus-io.pages.dev is offline, mitigating immediate risk. Users are advised to avoid accessing this domain or providing any sensitive information. Always verify official wallet URLs directly via the brand’s confirmed website or trusted app stores. Continuous monitoring for similar impersonation attempts is recommended to protect the Exodus community.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Exodus Web3 Wallet – Manage, Swap & Explore DeFi Securely

## Domain Intelligence
- Registered: 2026-03-04 23:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: gabe.ns.cloudflare.com violet.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ChainPatrol", "CyRadar", "Kaspersky", "Phishing Database", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/fVNnNsbB/8f43c3638119.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/web-ex-dus-io.pages.dev
- Wayback Machine: https://web.archive.org/web/https://web-ex-dus-io.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/web-ex-dus-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/web-ex-dus-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web-ex-dus-io.pages.dev/
Last updated: 2026-03-19