exodus-webs-wellet-en[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation threat targeting cryptocurrency users. Analysis indicates the site mimics legitimate Ethereum wallet software, presenting itself as a secure Web3 wallet solution. The page title, 'Exodus Web3 Wallet - Secure, Smart, and Seamless Crypto Experience,' is designed to deceive users into believing they are interacting with a trusted platform, while the actual intent is to harvest login credentials, private keys, or seed phrases. Such attacks typically lead to unauthorized access to digital assets and immediate financial loss for victims. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on February 21, 2026, through Cloudflare, Inc., and is hosted on an IP address (188.114.96.3) associated with Cloudflare's network. Security vendors have detected this threat, with 18 out of 95 engines on VirusTotal flagging the domain as malicious. Additionally, the domain appears on three security blocklists and is actively blocked by multiple threat intelligence platforms. The SSL certificate, issued by Google Trust Services, is a common tactic used to lend false legitimacy to phishing sites. Users who visited this domain should take immediate action to mitigate potential risks. If any credentials, private keys, or seed phrases were entered, assume they are compromised and transfer all assets to a new, secure wallet immediately. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Do not interact with any communications claiming to be from the impersonated brand, as follow-up attacks may occur. Report the domain to relevant security teams and consider scanning local devices for malware, as phishing sites often deploy additional payloads.