exhoduswibvbnwalet.gitbook.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of exhoduswibvbnwalet.gitbook.io
This domain appears to be a GitBook-hosted page presenting itself as documentation or informational content for an "Exodus Web3 Wallet" service. The page title, metadata, and screenshot suggest it is themed around a cryptocurrency wallet product, with language about non-custodial, multi-chain, and Web3 support. The site layout resembles a lightweight documentation page rather than a full corporate website or application portal.
The hostname itself is notable because it uses a subdomain on gitbook.io rather than a dedicated official-looking brand domain, and the label "exhoduswibvbnwalet" appears to imitate the name of the Exodus wallet brand while containing unusual misspellings. Based on the visible content and naming pattern, the page may be attempting to present itself as related to a cryptocurrency wallet brand, but it does not appear to be operated from an obvious official brand-owned domain.
Safety Assessment for exhoduswibvbnwalet.gitbook.io
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, with several classifying it as phishing or malicious, and it was also listed by 2 threat-database providers in the supplied blacklist data. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. The page content and metadata reference a cryptocurrency wallet brand, while the subdomain string appears misspelled and unusual, which may indicate an attempt to resemble a legitimate wallet-related resource.
Although the malware file scan did not report flagged files, that does not outweigh the broader phishing-related detections and the suspicious branding pattern. Cryptocurrency-themed pages hosted on third-party publishing platforms can sometimes be used to collect wallet credentials, recovery phrases, or redirect visitors to fraudulent support flows. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and the observed infrastructure sits behind Cloudflare on IP address 104.18.40.47. The page appears to be hosted on GitBook infrastructure, with supporting assets loaded from gitbook-related domains and Cloudflare acting as the edge network. The certificate validity and CDN-backed delivery indicate standard modern hosting practices, but these technical traits do not by themselves establish legitimacy.
DNSSEC appears to be unsigned, and the domain uses Cloudflare nameservers. No iframe activity was reported in the supplied scan data, and the page structure looks relatively simple. The main technical concern is not transport security but the combination of third-party hosted branding, phishing-related detections, and a suspiciously constructed subdomain name.
Share your experience with this website. Was it safe? Did you encounter any issues?