us-exoduseweb[.]pages[.]dev

The domain us-exoduseweb.pages.dev is associated with an elevated risk brand impersonation scam targeting Exodus, a well-known cryptocurrency service. Although the specific drainer kit is not identified, the domain's current status is offline. Individuals searching for the safety of us-exoduseweb.pages.dev should be aware that it has been flagged as a phishing site and is not safe.

Technical analysis reveals that us-exoduseweb.pages.dev was created on March 2, 2026, and resolves to the IP address 172.66.44.214. The domain is registered through Cloudflare, Inc. and exhibits a page title indicating suspicion as a phishing site. VirusTotal reports that 2 out of 95 security vendors, including ChainPatrol and Fortinet, have flagged this domain as malicious. The domain appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Google Trust Services / WE1, with the site utilizing technologies such as HSTS, Cloudflare, and HTTP/3.

Users who interacted with us-exoduseweb.pages.dev should take immediate safety measures, particularly if cryptocurrency credentials were involved. It is advised to revoke token approvals and transfer funds to a secure wallet. For general phishing concerns, changing passwords, enabling two-factor authentication, and monitoring accounts for fraudulent activity are recommended. Reports of phishing domains like us-exoduseweb.pages.dev can be made to security vendors and blocklists to prevent further impersonation attempts.