doc-exod--us-web3[.]pages[.]dev

The domain doc-exod--us-web3.pages.dev is a brand impersonation threat specifically targeting Exodus, a legitimate cryptocurrency wallet provider. This domain presents itself as the Exodus Web3 Wallet with a deceptive page title and is currently offline, having been taken down after detection. It was registered through Cloudflare, Inc. on March 23, 2026, and resolves to IP address 172.66.45.28. Security analysis reveals that 10 out of 95 VirusTotal security vendors flagged this domain as malicious, and it appears on one security blocklist. The SSL certificate was issued by Google Trust Services / WE1, which may lend a false sense of legitimacy to unsuspecting visitors.

The domain's creation date and registration details suggest it was set up specifically for phishing purposes, likely to harvest credentials or deploy a crypto drainer aimed at Exodus wallet users. The elevated risk level indicates that while it is currently offline, similar domains may appear in the future. The presence on a blocklist and the number of vendor flags underscore the threat it posed.

Users who have interacted with this domain should immediately change any passwords or recovery phrases they may have entered. PhishDestroy advises all users to verify any Exodus-related URLs against official sources before connecting wallets or entering sensitive information. As the domain is now offline, the immediate threat is contained, but vigilance remains critical. Always double-check domain names for subtle misspellings or unusual subdomains like "doc-exod--us-web3" to avoid falling victim to similar impersonation attacks. If you suspect any compromise, transfer funds to a new wallet generated on a secure, verified device.