exod-web3[.]pages[.]dev

This domain, exod-web3.pages.dev, operates as a crypto wallet drainer designed to deceive users into connecting their digital wallets to malicious smart contracts. Once connected, the site automatically siphons funds by executing unauthorized transactions, often leaving victims with empty balances. The threat primarily targets users of decentralized applications (dApps) and cryptocurrency platforms, leveraging social engineering tactics such as fake token airdrops, urgent security alerts, or counterfeit login portals to trick victims into disclosing sensitive credentials or approving malicious transactions. Analysis indicates this domain was registered on October 27, 2025, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. The site employs HSTS and HTTP/3 protocols, alongside a Google Trust Services SSL certificate, to appear legitimate. Despite these measures, 10 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on three security blocklists, including MetaMask and PhishDestroy. The domain’s trust score is 0/100, further corroborating its fraudulent nature. If you visited exod-web3.pages.dev or interacted with its content, immediately disconnect any connected wallets from the site and revoke all suspicious smart contract approvals using a blockchain explorer. Scan your device for malware, as phishing sites may deploy additional payloads. Monitor your wallet activity for unauthorized transactions and consider transferring remaining funds to a new, secure wallet. Report the domain to relevant platforms and security communities to prevent further victimization. Always verify the authenticity of Web3 sites by cross-referencing official sources before connecting wallets or entering credentials.