on-exodust-web[.]pages[.]dev

The domain on-exodust-web.pages.dev is a suspected phishing site that impersonates the Exodus brand. This site poses a specific threat of brand impersonation and is associated with cryptocurrency scams. The site has been taken offline, but it previously used a page title indicating suspicion of phishing activities. The risk level is elevated due to its presence on multiple security blocklists and detections by security vendors.

on-exodust-web.pages.dev was registered through Cloudflare, Inc. on March 04, 2026. The domain resolves to the IP address 172.66.47.71, which is located in the US and is part of AS13335 Cloudflare, Inc. The SSL certificate for the domain is issued by Google Trust Services / WE1. According to VirusTotal, 2 of 95 vendors flagged this domain as malicious, including ChainPatrol and Phishing Database. The domain appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. The HTTP status code for the domain is 403, indicating that access is forbidden.

If a user has interacted with on-exodust-web.pages.dev, they should take immediate steps to protect their information and assets. For cryptocurrency drainer scams, users should revoke any token approvals and move funds to a new, secure wallet. For credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any unauthorized activity. Users can also report the domain to Exodus, their cryptocurrency service provider, and any relevant security organizations to help prevent further phishing incidents.