eng-exodeos-us[.]pages[.]dev

PhishDestroy has identified eng-exodeos-us.pages.dev as an active cryptocurrency wallet drainer impersonating the legitimate Exodus Web3 Wallet. The fraudulent site mimics the official page title exactly—Exodus Web3 Wallet™ | Secure Crypto & NFT Management—while hosting a convincing but malicious replica designed to trick users into connecting wallets or entering seed phrases. The page leverages Cloudflare’s Pages.dev platform for rapid deployment and hides behind a Google Trust Services SSL certificate to appear legitimate, even though it has zero detections on VirusTotal (6/95). This domain was registered through Cloudflare, Inc. and remains unblocked across major threat intelligence feeds despite clear malicious intent. The use of a Google-issued certificate (a common tactic among phishing operations) combined with the exact replication of Exodus branding demonstrates a sophisticated social engineering approach. While the domain’s creation date is not provided, the absence of detections (6/95) and active status highlight the evasiveness of this attack vector, which often slips past automated defenses due to legitimate hosting infrastructure. Users who interacted with this site should immediately revoke any connected wallet permissions via their wallet’s app or extension. Never input seed phrases or private keys into untrusted sites, even if they appear authentic. Report the domain to PhishDestroy for blocking and monitor wallet transactions for unauthorized transfers. Always verify crypto-related websites by checking for official domains (e.g., exodus.com) and cross-referencing with PhishDestroy’s threat database before engaging.