exodus-7nr[.]pages[.]dev
“Exodus Pay”
exodus-7nr.pages.dev — Conteúdo indisponível. Representação da marca: Base; Tipo de golpe: Seed Phrase Theft. Resumo das evidências: VirusTotal 21/95 (ADMINUSLabs, ChainPatrol, Criminal IP, alphaMountain.ai, BitDefender); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 95/100. Registrador: Cloudflare.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain, exodus-7nr.pages.dev, poses a high risk of brand impersonation by mimicking the legitimate Exodus brand. The domain was created on February 09, 2026, and its page title, 'Exodus Pay,' is designed to deceive users into believing they are interacting with an official Exodus service. This impersonation can lead to potential theft of sensitive information, financial loss, or the installation of malware.
Analysis indicates that exodus-7nr.pages.dev has been flagged by 21 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Cloudflare, Inc., a common registrar for legitimate and malicious sites alike. The creation date of February 09, 2026, is relatively recent, indicating that this threat was active for a short period before being taken offline. Additionally, the domain appears on three security blocklists, further corroborating its malicious intent. The SSL certificate issued by Google Trust Services / WE1 does not guarantee the legitimacy of the site, as it is often used by phishing actors to gain user trust.
If users have visited exodus-7nr.pages.dev, they should immediately check their accounts for any unauthorized activity and consider changing their passwords. It is also recommended to run a full system scan to detect any malware that may have been installed. Users should report any suspicious activity to their financial institutions and the Exodus support team. Staying vigilant and verifying the authenticity of web pages by checking URLs and SSL certificates can help prevent falling victim to such scams.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências arquivadas
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of exodus-7nr.pages.dev · checked Mar 24, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo