# xodus-web3-wallet.pages.dev — SUSPICIOUS

> The domain xodus-web3-wallet.pages.dev is linked to crypto wallet draining. Avoid interaction and verify wallet security immediately.

## Summary
PhishDestroy identifies xodus-web3-wallet.pages.dev as a potential crypto drainer domain currently under investigation. Despite no detections from VirusTotal, the domain is suspected of targeting Web3 wallet users in attempts to illicitly access digital assets, posing significant financial risk.

The domain resolves to IP address 188.114.96.3 and is registered via Cloudflare, Inc., which provides hosting and protection services but does not guarantee legitimacy. The domain’s use of a Cloudflare subdomain and its recent registration raise concerns about its intent, despite the absence of confirmed malware or phishing signatures in automated scans.

Currently marked as active and under active investigation with the unique seed e82b7a for tracking, users are strongly advised to refrain from interacting with this domain. Security researchers and users should remain vigilant, employ multi-factor authentication on crypto wallets, and report any suspicious activity related to this domain to improve collective defenses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- Nameservers: deb.ns.cloudflare.com hunts.ns.cloudflare.com

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cf73c-ae03-71ca-8b2e-0141a697b05c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/f3f874de-5c09-4158-8c3d-cfd251058628
- PhishDestroy: https://phishdestroy.io/domain/xodus-web3-wallet.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/xodus-web3-wallet.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xodus-web3-wallet.pages.dev/
Last updated: 2026-03-19