officals-exoues[.]pages[.]dev

This domain, officals-exoues.pages.dev, is flagged as a high-risk brand impersonation threat targeting users of the Across protocol. Analysis indicates the domain hosts a fraudulent Exodus Web3 Wallet interface, designed to deceive victims into entering sensitive credentials or approving malicious transactions. The page title, 'Exodus Web3 Wallet – Your Gateway to the Decentralized Web,' directly mimics legitimate wallet branding to facilitate credential harvesting and unauthorized asset transfers. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 07, 2026, and resolves to the IP address 188.114.97.3, associated with AS13335 (Cloudflare, Inc.). The SSL certificate is issued by SSL Corporation / Cloudflare TLS Issuing ECC CA 3, a common configuration for Cloudflare-hosted domains. VirusTotal reports 10 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. The domain is currently offline, but prior detections by PhishDestroy, MetaMask, and SEAL confirm its active use in phishing campaigns. Current status indicates the domain has been taken offline, likely due to enforcement actions by hosting providers or security teams. However, the risk of re-emergence persists, as threat actors frequently rotate domains and infrastructure. Users who interacted with this domain should revoke any active wallet approvals, rotate credentials, and monitor for unauthorized transactions. Organizations are advised to block the domain and associated IP (188.114.97.3) at the network level to prevent further exposure.