ad[.]exodus[.]build

The domain ad.exodus.build was created on August 31 2025 and is registered through Name.com, Inc. Infrastructure analysis shows it resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The domain is serviced by Cloudflare name servers dom.ns.cloudflare.com and stevie.ns.cloudflare.com and does not present an SSL/TLS certificate, meaning it does not support HTTPS connections. Reputation services rate the domain extremely poorly: Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser records a score of 1 out of 100. VirusTotal reports that 14 of 95 participating security vendors flag the domain as malicious.

It is listed on a single public blocklist, PhishDestroy, which currently blocks the domain. The site is classified as a crypto‑related scam that impersonates the Exodus brand, though no page title or content has been captured because the domain is presently offline. Defenders should treat any traffic to or from 188.114.97.3 as suspicious and enforce blocking at the network perimeter.

Adding ad.exodus.build to internal DNS and URL filtering blocks, as well as monitoring for DNS queries to its Cloudflare name servers, will help prevent inadvertent user exposure. Continuous watch‑listing of newly registered domains containing “exodus” or similar brand terms is advised, given the recent creation date and low trust scores. Until the site becomes reachable, further static or dynamic analysis cannot be performed, so the primary mitigation remains proactive blocking and logging of any attempted connections.