exodusweb3-ens[.]pages[.]dev

This domain, exodusweb3-ens.pages.dev, operates as a fraudulent replica of the legitimate Exodus cryptocurrency wallet platform. Analysis indicates the site is designed to deceive users into entering sensitive credentials or connecting wallets, enabling attackers to drain digital assets through malicious smart contracts or phishing scripts. The page title, 'Exodus Web3 Wallet – Your Gateway to Decentralized Finance,' closely mirrors official branding, increasing the likelihood of successful social engineering attacks against unsuspecting users seeking decentralized finance services. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain was registered on March 02, 2026, through Cloudflare, Inc., and currently resolves to the IP address 172.66.47.108, hosted on Cloudflare’s network (AS13335). Security validation shows 12 out of 95 vendors on VirusTotal flag the domain as malicious, while three independent security blocklists have added it to their denylists. The SSL certificate, issued by Google Trust Services (WE1), provides no assurance of legitimacy, as fraudulent domains routinely exploit valid certificates to appear trustworthy. Users who have visited exodusweb3-ens.pages.dev or interacted with its content should take immediate corrective actions. Disconnect any connected wallets from the site and revoke all active smart contract approvals using a blockchain explorer or dedicated revocation tool. Scan the device for malware, particularly browser extensions or scripts that may have been installed. Monitor all linked accounts and wallets for unauthorized transactions, and report the incident to relevant security teams or fraud reporting platforms. Avoid reusing credentials from the compromised session, as attackers may attempt credential stuffing attacks across other services.