exosdeuswebr[.]pages[.]dev

This domain presents a high-risk brand impersonation threat targeting Exodus cryptocurrency wallet users. Analysis indicates the site mimics the official Exodus Web3 Wallet interface, using an identical page title 'Exodus Web3 Wallet — Securely Manage, Swap & Explore' to deceive visitors into entering sensitive credentials or transferring digital assets. The fraudulent nature of this domain is reinforced by its attempt to replicate trusted wallet functionality, including secure management, swapping, and exploration features, which are commonly exploited in cryptocurrency phishing schemes. Infrastructure analysis reveals concrete indicators of malicious activity. The domain exosdeuswebr.pages.dev was registered through Cloudflare, Inc. on April 30, 2026, and currently resolves to the IP address 172.66.44.213, located in California under Cloudflare's network. It is flagged by 2 out of 95 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), which, while providing encryption, does not validate the legitimacy of the site's content or intent. Users who have visited exosdeuswebr.pages.dev should take immediate action to mitigate potential risks. Any credentials, recovery phrases, or private keys entered on this site should be considered compromised. Affected individuals must transfer remaining assets to a new, secure wallet and revoke any connected permissions or authorizations linked to the fraudulent domain. Additionally, monitoring for unauthorized transactions and reporting the domain to relevant security platforms can help prevent further exploitation. This domain remains active as of the latest assessment, underscoring the need for heightened vigilance among cryptocurrency users.