exodus-ten-five[.]pages[.]dev

This domain, exodus-ten-five.pages.dev, is identified as a high-risk brand impersonation threat targeting Exodus, a well-known cryptocurrency wallet provider. Analysis indicates the site presents itself as a legitimate Web3 wallet interface, using the page title 'Exodus Web3 Wallet® | Next-Gen Crypto Experience' to deceive users into entering sensitive credentials or connecting their wallets. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with common phishing tactics used to harvest wallet recovery phrases or private keys. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. and resolves to the IP address 172.66.44.174. The domain was created on March 04, 2026, an anomalous future date suggesting potential manipulation of registration records. Security vendors on VirusTotal flagged the domain with a detection score of 12/95, while Gridinsoft assigned a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy to phishing sites. As of the latest assessment, the domain has been taken offline, likely due to rapid detection and reporting by security entities. While the immediate threat has been mitigated, residual risk remains for users who may have interacted with the site prior to its deactivation. It is recommended that affected individuals revoke any connected wallet sessions, monitor for unauthorized transactions, and verify the authenticity of any communications claiming to be from Exodus. Organizations should update blocklists and educate users on recognizing brand impersonation tactics in the cryptocurrency ecosystem.