app[.]exawealths[.]com

The domain app.exawealths.com is a confirmed phishing site engaged in brand impersonation, specifically targeting Google as part of a tech-support scam. It presents itself as a trading platform under the name 'ExaWealthsTrades' to deceive users into believing it is a legitimate service, though no crypto drainer kit was identified. As of the latest verification, app.exawealths.com has been taken offline, but its prior activity poses a risk to users who may have interacted with it.

Technical indicators for app.exawealths.com include detection by 1 of 95 VirusTotal security vendors, with Gridinsoft assigning a trust score of 0/100. The domain appears on 1 security blocklist, PhishDestroy, and was not flagged by Google Safe Browsing. It was created on February 21, 2026, and resolved to the IP address 172.245.14.133, hosted by AS36352 HostPapa in the US. The SSL certificate was issued by R10, and the observed page title was 'ExaWealthsTrades - Smooth Trading In Cryptocurrency, Forex, CFDs, Stocks, Bonds Etc'. No registrar information is available for this domain.

Users who encountered app.exawealths.com should take immediate safety steps to mitigate potential risks. Since this was a tech-support scam, victims should change passwords for any accounts accessed during the interaction, enable two-factor authentication (2FA) where possible, and monitor accounts for unauthorized activity. Report the phishing domain to Google Safe Browsing, the Federal Trade Commission (FTC), and local cybercrime units. If financial or personal data was shared, contact relevant institutions to secure accounts and consider placing a fraud alert on credit reports.