home-en-dus-exo[.]pages[.]dev
“Exodus Web3 Wallet | Getting started with Exodus Web3 Wallet”
home-en-dus-exo.pages.dev — 内容不可用. 品牌冒充:Across; 诈骗类型:Seed Phrase Theft. 证据摘要: VirusTotal 5/93 (ADMINUSLabs, ChainPatrol, Fortinet, Kaspersky, Trustwave); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 70/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis of home-en-dus-exo.pages.dev indicates a wallet seed-phishing domain impersonating the Across protocol, active since February 27, 2026. The domain resolves to Cloudflare IP 172.66.44.95 (AS13335, US) and uses Cloudflare nameservers (adi.ns.cloudflare.com, bayan.ns.cloudflare.com, eve.ns.cloudflare.com, karl.ns.cloudflare.com). The page title explicitly references 'Exodus Web3 Wallet | Getting started with Exodus Web3 Wallet,' suggesting an attempt to mimic legitimate wallet onboarding processes. Security vendors have flagged this domain, with 5 out of 93 engines on VirusTotal detecting malicious activity.
It appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The domain's Gridinsoft trust score is 0/100, reinforcing its high-risk classification. SSL certification is provided by Google Trust Services (WE1), and the site currently returns an HTTP 403 status, indicating it has been taken offline or restricted.
While the exact phishing mechanism remains unconfirmed due to the site's current inaccessibility, the combination of brand impersonation, low trust scores, and vendor detections strongly suggests a wallet seed-phishing operation. Defenders should treat this domain as malicious, block resolution at the network level, and monitor for related infrastructure (e.g., subdomains, linked IPs) that may emerge. No evidence of widespread distribution or victim reporting is currently available, but the domain's creation date and detection timeline align with typical phishing campaign lifecycles.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of home-en-dus-exo.pages.dev · checked Apr 11, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。