exodusweb-bvy[.]pages[.]dev

The domain exodusweb-bvy.pages.dev is flagged for brand impersonation, specifically targeting the Exodus brand. No drainer kit has been detected on this domain, but it poses a significant risk of credential theft and financial fraud by mimicking legitimate Exodus web pages.

Infrastructure analysis reveals that exodusweb-bvy.pages.dev is registered through Cloudflare, Inc., and resolves to the IP address 172.66.46.222. The domain was created on October 08, 2025. Analysis on VirusTotal indicates that 2 out of 95 security vendors have flagged this domain as malicious. The site appears on 3 security blocklists and has a Gridinsoft trust score of 0 out of 100. The SSL certificate is issued by Google Trust Services, and the site employs HSTS and HTTP/3 technologies.

The domain is currently offline, which reduces the immediate risk to users. However, the site was previously accessible and poses a significant threat due to its impersonation of the Exodus brand. Immediate response actions include monitoring for reactivation and educating users about the importance of verifying URLs and SSL certificates. Despite the domain being taken offline, there remains a risk that it could be reactivated or that similar domains could be used for the same purpose. Users are advised to exercise caution and report any suspicious activity to their security teams.