# Phishing sites impersonating Exodus Wallet PhishDestroy has recorded 33 phishing domains impersonating Exodus Wallet since 2025-12-21, 0 of them in the last 30 days. The most used registrars are CSC Corporate Domains and Cloudflare; the most common TLDs are .app and .io. Open Exodus Wallet only from its official app or a saved bookmark. 33Domains, all time 0Last 30 days 10Online at last check 15Confirmed takedowns ## New domains in the last 90 days Exodus Wallet phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Exodus Wallet site Words most often added to the brand in reported domains: exodus, process, exo, dora, centre, backup, wallet, meku, xodus, nav. - Type the address yourself or use a bookmark; phishing links for Exodus Wallet arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Exodus Wallet will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Exodus Wallet phishing domains The 33 most recently detected domains impersonating Exodus Wallet Domain | First detected | Status at last check | Registrar | [exodus-official.org](https://phishdestroy.io/domain/exodus-official.org/) | 2026-02-22 | Offline | CNOBIN INFORMATION TECHNOLOGY | [home-exodus-wallet.blogspot.com](https://phishdestroy.io/domain/home-exodus-wallet.blogspot.com/) | 2026-02-20 | Online | MarkMonitor | [exodusweeb3waleet.webflow.io](https://phishdestroy.io/domain/exodusweeb3waleet.webflow.io/) | 2026-02-18 | Offline | NameCheap | [exoodusweeb3walet.webflow.io](https://phishdestroy.io/domain/exoodusweeb3walet.webflow.io/) | 2026-02-18 | Offline | NameCheap | [exexdusweb.pages.dev](https://phishdestroy.io/domain/exexdusweb.pages.dev/) | 2026-02-14 | Offline | Cloudflare | [exo-dsweb3.created.app](https://phishdestroy.io/domain/exo-dsweb3.created.app/) | 2026-02-11 | Online | Tucows Domains | [web3-exodus.created.app](https://phishdestroy.io/domain/web3-exodus.created.app/) | 2026-02-11 | Online | Tucows Domains | [sso-exods-web3.typedream.app](https://phishdestroy.io/domain/sso-exods-web3.typedream.app/) | 2026-02-10 | Online | Squarespace Domains II | [welcome--exodus.dora.run](https://phishdestroy.io/domain/welcome--exodus.dora.run/) | 2026-02-10 | Offline | HiChina (www.net.cn) | [docs-exodus--cdn-web.dora.run](https://phishdestroy.io/domain/docs-exodus--cdn-web.dora.run/) | 2026-02-10 | Offline | HiChina (www.net.cn) | [docs-exodus-home-cdn.dora.run](https://phishdestroy.io/domain/docs-exodus-home-cdn.dora.run/) | 2026-02-10 | Offline | HiChina (www.net.cn) | [exoduswallet.exo.co.com](https://phishdestroy.io/domain/exoduswallet.exo.co.com/) | 2026-02-10 | Offline | Moniker Online Services | [coins-mart-nav.pages.dev](https://phishdestroy.io/domain/coins-mart-nav.pages.dev/) | 2026-02-09 | Offline | Cloudflare | [doc-exds-web3.pages.dev](https://phishdestroy.io/domain/doc-exds-web3.pages.dev/) | 2026-02-09 | Offline | Cloudflare | [exiodouswab3wiallet.gitbook.io](https://phishdestroy.io/domain/exiodouswab3wiallet.gitbook.io/) | 2026-02-09 | Online | Cloudflare | [xodus-en.framer.ai](https://phishdestroy.io/domain/xodus-en.framer.ai/) | 2026-02-04 | Taken down | CSC Corporate Domains | [web3-excdous.framer.media](https://phishdestroy.io/domain/web3-excdous.framer.media/) | 2026-02-04 | Taken down | CSC Corporate Domains | [intro-exoduc-us.framer.media](https://phishdestroy.io/domain/intro-exoduc-us.framer.media/) | 2026-02-04 | Taken down | CSC Corporate Domains | [exodusru.com](https://phishdestroy.io/domain/exodusru.com/) | 2026-02-03 | Online | Key-Systems | [exdos-us-en.zapier.app](https://phishdestroy.io/domain/exdos-us-en.zapier.app/) | 2026-02-02 | Taken down | Name.com | [exo-dus-web3.framer.media](https://phishdestroy.io/domain/exo-dus-web3.framer.media/) | 2026-01-30 | Taken down | CSC Corporate Domains | [exdous.framer.ai](https://phishdestroy.io/domain/exdous.framer.ai/) | 2026-01-30 | Taken down | CSC Corporate Domains | [xodus-web-nav.meku.app](https://phishdestroy.io/domain/xodus-web-nav.meku.app/) | 2026-01-24 | Online | Porkbun | [exodus-web3-walle.meku.app](https://phishdestroy.io/domain/exodus-web3-walle.meku.app/) | 2026-01-24 | Online | Porkbun | [exodus-wallet-aap.framer.media](https://phishdestroy.io/domain/exodus-wallet-aap.framer.media/) | 2026-01-22 | Taken down | CSC Corporate Domains | [ex-od-us-en.framer.ai](https://phishdestroy.io/domain/ex-od-us-en.framer.ai/) | 2026-01-05 | Taken down | CSC Corporate Domains | [ex-odus.framer.media](https://phishdestroy.io/domain/ex-odus.framer.media/) | 2026-01-05 | Taken down | CSC Corporate Domains | [process-center.vercel.app](https://phishdestroy.io/domain/process-center.vercel.app/) | 2026-01-04 | Taken down | Vercel | [backup-centre-process-us.vercel.app](https://phishdestroy.io/domain/backup-centre-process-us.vercel.app/) | 2026-01-03 | Taken down | Vercel | [exobus.io](https://phishdestroy.io/domain/exobus.io/) | 2025-12-31 | Taken down | Registrar.eu | [exoiduseieuwallet.webflow.io](https://phishdestroy.io/domain/exoiduseieuwallet.webflow.io/) | 2025-12-31 | Taken down | MarkMonitor | [centre-backup-process-us.vercel.app](https://phishdestroy.io/domain/centre-backup-process-us.vercel.app/) | 2025-12-27 | Taken down | Vercel | [exdusweb3.framer.ai](https://phishdestroy.io/domain/exdusweb3.framer.ai/) | 2025-12-21 | Taken down | CSC Corporate Domains | [All 33 Exodus Wallet reports](https://phishdestroy.io/domain/?brand=Exodus Wallet) ## Where they are registered and hosted ### Registrars - CSC Corporate Domains9 - Cloudflare4 - Vercel3 - HiChina (www.net.cn)3 - [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)2 - [Porkbun](https://phishdestroy.io/registrar/porkbun/)2 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)2 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)2 ### Top-level domains - [.app](https://phishdestroy.io/tld/app/)9 - [.io](https://phishdestroy.io/tld/io/)5 - [.media](https://phishdestroy.io/tld/media/)5 - [.ai](https://phishdestroy.io/tld/ai/)4 - [.com](https://phishdestroy.io/tld/com/)3 - [.dev](https://phishdestroy.io/tld/dev/)3 - [.run](https://phishdestroy.io/tld/run/)3 - [.org](https://phishdestroy.io/tld/org/)1 ### Hosting networks - AMAZON-02 - Amazon.com, Inc., US11 - AMAZON-02, US7 - CLOUDFLARENET - Cloudflare, Inc., US6 - DigitalOcean, LLC2 - Cloudflare, Inc.2 - CLOUDFLARENET, US1 - RAILNET Railnet LLC, US1 - Amazon.com, Inc.1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Exodus Wallet; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/exodus-wallet/