walletapp-exodus[.]pages[.]dev

This domain, walletapp-exodus.pages.dev, is identified as a high-risk brand impersonation phishing site currently offline. It specifically targets users of the Exodus cryptocurrency wallet platform, attempting to deceive victims into divulging sensitive credentials or transferring assets under false pretenses.

Analysis of technical indicators reveals the domain was flagged by 14 of 95 security vendors on VirusTotal, indicating broad detection across multiple threat intelligence sources. Infrastructure analysis shows the domain was registered through Cloudflare, Inc., resolving to the IP address 172.66.45.10 (AS13335, US). The domain was created on January 22, 2026, and appears on three security blocklists, including entries from PhishDestroy and SEAL. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of malicious domains leveraging legitimate infrastructure providers to evade detection.

As of the latest assessment, the domain has been taken offline, and its page title was explicitly labeled 'Suspected phishing site | Cloudflare.' Despite its current inactive status, organizations and individuals are advised to proactively block the domain and its associated IP address within network security controls. Users who may have interacted with this domain should immediately revoke any active sessions, rotate credentials, and conduct a thorough audit of associated accounts for unauthorized activity. Monitoring for similar domains using the 'exodus' brand name or Cloudflare Pages infrastructure is recommended to mitigate future risks.