new-exodus-en[.]pages[.]dev

The domain new-exodus-en.pages.dev is a confirmed phishing site engaged in brand impersonation targeting users of the 'across' platform. It presents itself as an Exodus Web3 wallet browser extension but is designed to harvest seed phrases or login credentials through a seed-phishing scam. No crypto drainer kit was identified, and the site is currently taken offline, though it previously posed a high risk to visitors.

Technical indicators confirm the malicious nature of new-exodus-en.pages.dev. The domain was flagged by 10 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai, and appears on 3 security blocklists (PhishDestroy, MetaMask, and SEAL). Registered through Cloudflare, Inc. on February 22, 2026, it resolved to the IP address 172.66.44.145 (US, AS13335 Cloudflare, Inc.) and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Exodus® Web3 Wallet | Exódus® Browser Extension', and the domain employed technologies such as HSTS, Cloudflare, and HTTP/3. Gridinsoft assigned it a trust score of 0/100, and it is currently returning an HTTP 403 status.

Users who interacted with new-exodus-en.pages.dev should immediately revoke any token approvals and transfer funds to a new wallet to prevent unauthorized access. If login credentials or seed phrases were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for suspicious activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's official security team for further action.