app-io-exodas-en[.]pages[.]dev

PhishDestroy identifies app-io-exodas-en.pages.dev as a HIGH-RISK generic phishing page that masquerades as the legitimate Exodus Wallet application. The lure specifically targets cryptocurrency holders by aping the official ‘Exodus Wallet App – Track and Manage Your Crypto Portfolio’ page title and visual identity in order to harvest seed phrases, private keys or wallet passwords. Risk level is HIGH because the site is still live at the time of writing and directly engages in credential theft rather than mere redirection. This domain was flagged via PhishDestroy’s automated pipeline on seed 125699 and has been confirmed active by multiple crawlers. VirusTotal reports a detection rate of 1 out of 95 security vendors as of the latest scan, indicating low but not zero coverage. The page is fronted by Cloudflare, Inc. (acting as registrar and DNS host) and resolves to the Cloudflare edge IP 188.114.97.3 via Google Trust Services SSL, which does not by itself guarantee legitimacy. No historical blocklist snapshot shows prior takedowns, pointing to a recently stood-up infrastructure less than seven days old. Users should NEVER enter any wallet recovery phrase, private key or password into this domain or any page reached from it. Instead, verify the official Exodus download URL (exodus.com/download) or use the verified application installed from a trusted app store. If credentials were already entered, immediately transfer all funds to a newly generated wallet on another device, rotate any reused passwords, and revoke session tokens. Block the domain at DNS level and report the incident to Exodus support for takedown coordination.