view-exodus-doc[.]pages[.]dev

This domain, view-exodus-doc.pages.dev, is flagged as a brand‑impersonation site targeting Exodus. The page title returned by the server is “Suspected phishing site | Cloudflare,” indicating that Cloudflare’s own protective page is being served. The domain resolves to 188.114.96.3, an address owned by AS13335 Cloudflare, Inc., in the United States, and the SSL certificate is issued by Google Trust Services under the WE1 designation, a common certificate for Cloudflare‑hosted sites. The domain was registered on March 02 2026 through Cloudflare, Inc., and uses the nameservers cloe.ns.cloudflare.com and edward.ns.cloudflare.com. Infrastructure analysis shows HSTS and HTTP/3 are enabled, confirming modern Cloudflare configuration.

VirusTotal reports that four of ninety‑three scanning engines have flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, and SEAL) currently list it as malicious. The Gridinsoft trust score is 0 / 100, reinforcing the low reputation. An HTTP 403 response is returned, and the site is presently taken offline, but the historical indicators remain relevant for threat‑intel correlation. The intelligence explicitly states the site impersonates the Exodus brand and is categorized as a crypto‑scam.

No additional content analysis is available beyond the page title, so the exact phishing tactics cannot be confirmed. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑activation of the host, and correlate any traffic to the 188.114.96.3 address with other Exodus‑related abuse. Ongoing observation of Cloudflare‑issued certificates for similar naming patterns is advised, as the rapid creation date suggests a short‑lived campaign. The elevated risk rating reflects the combination of brand impersonation, cryptocurrency focus, and multiple vendor detections.