exxods-io-app[.]pages[.]dev

PhishDestroy identifies exxods-io-app.pages.dev as an active crypto drainer phishing domain designed to trick users into connecting cryptocurrency wallets under false pretenses. This domain lures victims with deceptive branding or false promises of rewards, then silently drains assets once wallet permissions are granted. The threat is elevated due to its use of Cloudflare Pages hosting, which obscures malicious infrastructure while providing SSL encryption via Google Trust Services to appear legitimate. Users who interact with this site risk irreversible cryptocurrency loss due to unauthorized wallet transactions. This domain was flagged by PhishDestroy with a VirusTotal detection rate of 1 out of 95 security vendors, indicating low but concerning recognition among automated scanners. It is registered through Cloudflare, Inc., resolving to IP address 172.66.44.101, and leverages Cloudflare Pages for rapid deployment and evasion. While SSL certificates add superficial trust, they do not verify legitimacy, making this a classic crypto drainer tactic. If you visited exxods-io-app.pages.dev, disconnect your wallet immediately using your wallet’s revoke feature or disconnect the dApp connection. Do not interact further with the site. Scan your device for malware and monitor wallet transactions for unauthorized activity. Report the domain to your antivirus provider and platforms like Google Safe Browsing to help block future access. Always verify URLs and use hardware wallets or transaction approval tools for enhanced security.