web3-io-live-app[.]pages[.]dev

PhishDestroy identifies web3-io-live-app.pages.dev as an active generic phishing domain currently under investigation. This site poses as a legitimate Web3 or cryptocurrency application, aiming to steal user credentials or inject malicious payloads. The threat is classified as active, meaning it is currently accessible and may be operational. The domain was registered through Cloudflare, Inc. and resolves to IP 188.114.97.3, which is associated with Google Trust Services SSL certificates. Notably, VirusTotal reports 11 out of 95 detections at the time of analysis, indicating that no antivirus or security vendor has flagged this domain yet. This low detection rate suggests the site may be newly operational or employing evasion techniques. The domain follows a pattern often used by threat actors to mimic legitimate Web3 or financial platforms, leveraging Cloudflare's infrastructure to host phishing content. If you visited web3-io-live-app.pages.dev, avoid entering any credentials, downloading files, or interacting with the site further. Disconnect from the network if you suspect malicious activity. Immediately run a full antivirus scan on your device and monitor accounts for suspicious transactions. Report the domain to your security team or relevant authorities. For further analysis and indicators of compromise, consult the full threat advisory.