en-us-web3exodus[.]pages[.]dev

This domain, en-us-web3exodus.pages.dev, poses a high risk of brand impersonation, specifically targeting Ethereum users. The site mimics the appearance of legitimate Ethereum-related services, such as Exodus Web3 Wallet, to deceive visitors into divulging sensitive information or installing malicious software.

Analysis indicates that en-us-web3exodus.pages.dev was created on October 13, 2025, and is registered through Cloudflare, Inc. The domain resolves to the IP address 188.114.96.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. Notably, 17 out of 95 security vendors on VirusTotal have flagged this domain as malicious, and it appears on three security blocklists: PhishDestroy, MetaMask, and SEAL.

If a user has visited en-us-web3exodus.pages.dev, it is crucial to take immediate action to protect personal and financial information. First, change any passwords or credentials that may have been entered on the site, especially those associated with Ethereum accounts or wallets. Next, scan the device for malware using a reputable antivirus solution. Finally, report the incident to the Ethereum community or any relevant security forums to help others avoid the same threat.