center-exodus-backup[.]vercel[.]app

This domain center-exodus-backup.vercel.app is assessed as a brand impersonation campaign targeting Exodus users. The site is designed to mimic a legitimate crypto wallet access or recovery interface, aiming to capture sensitive authentication data such as seed phrases or login credentials.

Technical analysis shows multiple corroborating indicators. VirusTotal reports 17/95 security vendors flagging the domain as malicious. The domain was created on February 21 2026 and is currently offline. It resolves to IP 64.29.17.67, geolocated in the United States under AS16509 Amazon.com, Inc. The SSL certificate is issued by Google Trust Services / WR1. The domain is registered through Tucows Domains Inc. The page title observed is 'Deployment Unavailable'. It appears on 4 security blocklists including PhishDestroy, MetaMask, SEAL, and PhishingDB. The infrastructure impersonates Exodus branding.

We recommend blocking the domain at DNS, proxy, and endpoint layers. Any user interaction should be treated as potential credential compromise. If accessed, users should reset wallet credentials, migrate assets to new secure wallets, and monitor for unauthorized transactions. Security teams should review logs for connections to 64.29.17.67 and deploy indicators of compromise across detection systems. Continuous monitoring is advised due to the use of reputable cloud and SSL infrastructure to evade basic filtering.