new-exodus-en[.]pages[.]dev
“Exodus® Web3 Wallet | Exódus® Browser Extension”
new-exodus-en.pages.dev — Konten tidak tersedia. Peniruan identitas merek: Across; Jenis penipuan: Seed Phrase Theft. Ringkasan bukti: VirusTotal 10/95 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, Fortinet); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 80/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain new-exodus-en.pages.dev is a confirmed phishing site engaged in brand impersonation targeting users of the 'across' platform. It presents itself as an Exodus Web3 wallet browser extension but is designed to harvest seed phrases or login credentials through a seed-phishing scam. No crypto drainer kit was identified, and the site is currently taken offline, though it previously posed a high risk to visitors.
Technical indicators confirm the malicious nature of new-exodus-en.pages.dev. The domain was flagged by 10 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai, and appears on 3 security blocklists (PhishDestroy, MetaMask, and SEAL). Registered through Cloudflare, Inc. on February 22, 2026, it resolved to the IP address 172.66.44.145 (US, AS13335 Cloudflare, Inc.) and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Exodus® Web3 Wallet | Exódus® Browser Extension', and the domain employed technologies such as HSTS, Cloudflare, and HTTP/3. Gridinsoft assigned it a trust score of 0/100, and it is currently returning an HTTP 403 status.
Users who interacted with new-exodus-en.pages.dev should immediately revoke any token approvals and transfer funds to a new wallet to prevent unauthorized access. If login credentials or seed phrases were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for suspicious activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's official security team for further action.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of new-exodus-en.pages.dev · checked Mar 25, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive