app-io-exxods[.]pages[.]dev

PhishDestroy has identified app-io-exxods.pages.dev as a brand impersonation phishing domain specifically targeting the Exodus wallet brand. This site is currently offline, having been taken down after its malicious activity was detected. The page title, "Exodus Wallet Review 2025 – Features, Security & Tips," was crafted to deceive users seeking legitimate information about Exodus wallet, but instead aimed to harvest credentials or install malware.

Technical analysis reveals that the domain was created on February 21, 2026, and registered through Cloudflare, Inc. It resolves to IP address 172.66.44.176. On VirusTotal, 16 out of 95 security vendors flagged this domain as malicious, and it appears on three security blocklists. The SSL certificate was issued by Google Trust Services (WE1), which may have lent it a false sense of legitimacy. Despite being offline, the domain's infrastructure and registration details remain valuable for threat intelligence.

Given the high risk level and clear brand impersonation, users should avoid any interaction with this domain. Even though it is currently offline, similar domains may appear. PhishDestroy recommends using a reputable security solution that includes web filtering and phishing protection. Always verify URLs before entering sensitive information, especially for cryptocurrency wallets. If you have already visited this site, run a full security scan and change your Exodus wallet credentials immediately.