xodus-web3-wallet[.]pages[.]dev

The domain xodus-web3-wallet.pages.dev has been identified as a brand impersonation threat specifically targeting Exodus cryptocurrency wallet users. This domain is currently offline, but its previous operational status placed it at high risk for credential theft and crypto asset loss. The page title, 'Exodus Web3 Wallet | Exodus® Browser Extension,' was designed to deceive users into believing they were interacting with the legitimate Exodus platform.

Technical analysis reveals that this domain was flagged by 19 of 95 VirusTotal vendors, indicating widespread security consensus on its malicious nature. It appears on three security blocklists and was registered through Cloudflare, Inc. The domain resolves to IP address 172.66.44.252 and was created on October 1, 2025. These indicators collectively confirm the domain's association with fraudulent activity aimed at stealing Exodus wallet credentials or crypto funds.

Although the domain is currently offline, users who may have interacted with it should immediately change their Exodus wallet passwords and enable two-factor authentication. It is strongly recommended to avoid visiting this domain or any similar domains and to report any suspicious URLs to security authorities. PhishDestroy advises all users to verify wallet links only through official Exodus channels and to exercise caution with unsolicited communications promoting wallet updates or extensions.