web-axodus[.]pages[.]dev

PhishDestroy identifies web-axodus.pages.dev as a confirmed phishing domain engaged in brand impersonation targeting Exodus, the popular cryptocurrency wallet. This domain was registered through Cloudflare, Inc. on September 24, 2025, and its page title fraudulently claimed to be the "Exodus Web3 Wallet | Official Multi-Asset Wallet." No specific drainer kit was identified, but the site was designed to harvest credentials or seed phrases from unsuspecting users.

Technical indicators for web-axodus.pages.dev include a VirusTotal score of 0 out of 95, meaning it was not flagged by any antivirus engines at the time of analysis. The domain was registered via Cloudflare, Inc. and resolves to IP address 172.66.44.86. Its SSL certificate was issued by Google Trust Services / WE1, adding a false layer of legitimacy. The domain currently appears on 3 security blocklists, reflecting its malicious nature. Google Safe Browsing status was not explicitly provided but is consistent with the phishing profile.

As of the latest check, web-axodus.pages.dev has been taken offline, mitigating immediate risk to users. However, given the sophisticated impersonation of Exodus and the low detection rate, users who previously interacted with the site should consider their wallets potentially compromised. PhishDestroy recommends changing passwords, revoking unauthorized permissions, and monitoring accounts for suspicious activity. Always verify URLs directly through official Exodus channels and avoid clicking on unsolicited links.