# io-exodusweb3.pages.dev — MALICIOUS

> io-exodusweb3.pages.dev flagged as a suspected phishing site. Learn why this domain is under investigation and how to stay safe online.

## Summary
PhishDestroy identifies io-exodusweb3.pages.dev as a suspected phishing domain currently under investigation. It is classified as generic phishing based on its suspicious naming and hosting context.

The domain resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc. Despite no detections on VirusTotal, its use of Cloudflare's infrastructure and recent registration raise caution. No confirmed malware signatures or vendor flags exist yet.

Currently active, the domain remains under close monitoring. Users are advised to avoid interaction until further analysis confirms its intent. PhishDestroy continues to track updates and will provide alerts on any changes in status.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-09 13:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: hassan.ns.cloudflare.com melinda.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "CyRadar", "ESET", "Fortinet", "Phishing Database", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd26b-ee7b-71c0-994f-6389b34c4d0b.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2e7425e3-233f-411e-98f5-2028657c8d13
- PhishDestroy: https://phishdestroy.io/domain/io-exodusweb3.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/io-exodusweb3.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/io-exodusweb3.pages.dev/
Last updated: 2026-03-19