exedusweb3-faq[.]pages[.]dev

This domain, exedusweb3-faq.pages.dev, is under investigation for brand impersonation targeting Exodus, a known Web3 wallet provider. Infrastructure analysis reveals the domain was registered on April 20, 2026, through Cloudflare, Inc., and currently resolves to the IP address 172.66.45.39. The page title, 'Exodus Web3 Wallet — Presentation,' directly references the targeted brand, indicating an attempt to deceive users into believing the site is affiliated with Exodus. The domain is flagged on one security blocklist and has been blocked by PhishDestroy, though no detections were reported by 95 vendors in a recent scan. Technologies detected include HSTS, Cloudflare infrastructure, and HTTP/3, with an SSL certificate issued by Google Trust Services. The Gridinsoft trust score of 0/100 further suggests high risk. While the domain remains active, defenders should prioritize monitoring and blocking access, as the combination of brand impersonation, recent registration, and Cloudflare-hosted infrastructure is consistent with phishing campaigns. The exact content and functionality of the site have not yet been analyzed, so additional indicators of compromise may emerge upon further inspection. Organizations should treat this domain as a potential threat until conclusive evidence confirms its legitimacy or malicious intent.