doc-exodus-web3-en-us[.]pages[.]dev
“Exódus® Web3 Wallet & Browser Extension”
doc-exodus-web3-en-us.pages.dev — Konten tidak tersedia. Peniruan identitas merek: Exodus; Jenis penipuan: Seed Phrase Theft. Ringkasan bukti: VirusTotal 5/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, Kaspersky, Trustwave); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 70/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain doc-exodus-web3-en-us.pages.dev was registered on February 28, 2026 and is currently taken offline. Technical probing shows the hostname resolves to the Cloudflare‑owned address 172.66.44.58, which belongs to AS13335 in the United States. An HTTPS request returns a 403 status code, indicating that the server is deliberately denying access, a pattern often observed when phishing infrastructure is being dismantled or redirected. The TLS certificate is issued by Google Trust Services under the WE1 name, confirming that the connection is terminated at Cloudflare’s edge rather than a self‑signed or malicious certificate. The site’s page title, "Exódus® Web3 Wallet & Browser Extension," explicitly references the Exodus brand and aligns with the classified scam type of wallet or seed phishing, suggesting an attempt to harvest cryptocurrency seed phrases from unsuspecting users.
Cloudflare is listed as the registrar, and the domain uses four Cloudflare nameservers (adi.ns.cloudflare.com, brodie.ns.cloudflare.com, karl.ns.cloudflare.com, ursula.ns.). Detected technologies include HSTS, HTTP/3, and the Cloudflare CDN, all of which are typical for legitimate services but also for threat actors seeking resilience and encryption. Reputation checks show the domain appears on three security blocklists and has been flagged by PhishDestroy, MetaMask, and SEAL, reinforcing the conclusion of malicious intent. VirusTotal analysis reports five out of ninety‑three scanners flagging the domain, while Gridinsoft assigns a trust score of zero out of one hundred, indicating a high confidence of abuse.
The combination of brand impersonation, a wallet‑focused lure, and the observed security signals suggests the infrastructure was designed to lure Exodus users into submitting private keys or recovery phrases. Defenders should continue to block the domain at network perimeter, update URL filtering lists, and monitor for any resurgence of the hostname or related subdomains.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of doc-exodus-web3-en-us.pages.dev · checked Apr 11, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive