hub-exodus[.]com

This domain, hub-exodus.com, is flagged as a crypto scam impersonating Exodus, a known cryptocurrency wallet provider. Analysis indicates the domain was registered on February 23, 2026, through NiceNIC International Group Co., Limited, and is currently offline. Infrastructure analysis reveals it resolves to IP 188.114.97.3, hosted on Cloudflare's network (AS13335) in the US, with nameservers aria.ns.cloudflare.com and braden.ns.cloudflare.com. No SSL certificate was detected, increasing the risk of unencrypted data transmission.

The page title, 'Ledger - Track Case,' suggests an attempt to mimic legitimate tracking or support pages, though the exact content and functionality remain unconfirmed due to the domain's offline status. Six of 93 security vendors on VirusTotal flagged this domain, indicating moderate detection but not universal consensus. It appears on at least one security blocklist and is blocked by PhishDestroy. The combination of Cloudflare hosting, lack of SSL, and a page title referencing Ledger—while impersonating Exodus—raises concerns about a potential hybrid impersonation tactic, possibly targeting users seeking support or transaction tracking.

Defenders should treat this domain as high-risk for crypto-related fraud, particularly given its association with Exodus and the use of Cloudflare to obscure hosting details. Monitoring for reappearance under the same or similar infrastructure is recommended, alongside blocking resolutions to the identified IP and nameservers. Further investigation into related domains registered through the same registrar or hosted on Cloudflare may uncover additional threats.