web3-exodswallt[.]pages[.]dev

The domain web3-exodswallt.pages.dev is a confirmed generic phishing site targeting decentralized finance (DeFi) users. It operates as a DeFi scam, attempting to trick victims into disclosing sensitive information or interacting with malicious smart contracts. No specific brand impersonation or drainer kit was identified. The site is currently taken offline, but prior activity classified it as a high-risk threat.

Technical indicators confirm the malicious nature of web3-exodswallt.pages.dev. The domain was flagged by 13 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. It appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through Cloudflare, Inc. on October 17, 2025, the domain resolves to IP address 188.114.96.3, hosted by Cloudflare (AS13335). The SSL certificate is issued by Google Trust Services / WE1. The observed page title was 'Suspected phishing site | Cloudflare', and the HTTP status returned a 403 error. Gridinsoft assigned a trust score of 0/100, and technologies detected include HSTS and Cloudflare.

Victims of web3-exodswallt.pages.dev should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Move funds to a new, secure wallet and monitor accounts for unauthorized transactions. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Report the domain to Google Safe Browsing, MetaMask’s phishing detection, and platforms like ChainPatrol or SEAL to aid in blocking future threats.