exeodusweb3-us[.]pages[.]dev

PhishDestroy identifies the active cryptocurrency phishing campaign targeting the domain exeodusweb3-us.pages.dev. This domain is currently engaged in a phishing operation designed to deceive users into providing sensitive wallet credentials under the guise of a legitimate cryptocurrency service. The threat level is classified as elevated, indicating an increased likelihood of successful compromise for unwary users.

This domain was flagged by 1 of 95 VirusTotal vendors, indicating limited but noteworthy detection. It resolves to IP address 188.114.96.3, is registered through Cloudflare, Inc., and holds an SSL certificate issued by Google Trust Services. Despite its Google-backed SSL certification, which may lend an appearance of legitimacy, the domain remains associated with malicious intent. The low detection ratio on VirusTotal should not be misinterpreted as safety; rather, it underscores the sophistication of the threat actor in evading broad detection mechanisms.

As of the most recent analysis, exeodusweb3-us.pages.dev remains active and poses a credible risk to users who may interact with it. PhishDestroy recommends immediate blacklisting of this domain and IP address at the network perimeter. Users should avoid accessing this domain and verify any unexpected cryptocurrency-related communications through official channels. Organizations are urged to update firewall rules, DNS blocks, and email filtering rules to include this domain and its associated IP. Continuous monitoring is advised due to the adaptive nature of phishing infrastructures.