doc-exodus--o-web3[.]pages[.]dev

This domain impersonates the Exodus cryptocurrency wallet, presenting a fraudulent Web3 browser extension interface to deceive users into disclosing sensitive credentials or private keys. The site closely replicates official branding, including the use of the registered trademark symbol (Exódus®), to appear legitimate. Victims risk unauthorized access to their digital assets, including cryptocurrency theft or account compromise, if they interact with the site or download its purported software. Analysis indicates the domain was registered on March 04, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. It holds a Gridinsoft trust score of 0/100 and is flagged by 10 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists and uses an SSL certificate issued by Google Trust Services, which does not validate its legitimacy. The page title, 'Exódus® Web3 Wallet | Exódus® Browser Extension,' directly mimics the official Exodus branding to enhance credibility. If you visited this domain or interacted with its content, immediately cease all engagement and revoke any permissions granted to browser extensions or applications associated with it. Scan your system for malware using updated security tools and monitor connected cryptocurrency wallets for unauthorized transactions. Change passwords and private keys for all cryptocurrency accounts, especially those linked to Exodus or other Web3 wallets. Report the incident to relevant security teams and consider notifying your wallet provider to flag potential fraud.