The domain exoduss-pdf-wallet.wasmer.app is currently classified as a high‑risk crypto drainer and remains active as of the report date, July 30, 2026. VirusTotal records indicate that 18 of 91 security vendors have flagged the domain, demonstrating notable detection across multiple scanning engines. The domain is listed on two public blocklists and is actively blocked by PhishDestroy and OpenPhish, confirming that several threat‑intelligence feeds have recognized the malicious activity.
Infrastructure analysis shows that the domain resolves to the IPv4 address 62.210.172.151. DNS resolution is served by the authoritative nameservers alpha.ns.wasmernet.com and beta.ns.wasmernet.com, and the registration is handled by Wasmer Inc. No additional technical details such as SSL certificate information, HTTP response codes, page title, or content analysis are presently available, leaving the exact payload or delivery mechanism unconfirmed. However, the combination of vendor detections, blocklist presence, and the designation as a crypto drainer strongly suggests that the site is used to illicitly siphon cryptocurrency assets from unsuspecting victims.
Defenders should ensure that the domain and its associated IP address are added to network‑level deny lists, enforce DNS filtering to block resolution, and monitor outbound connections for attempts to contact the IP 62.210.172.151. Continuous re‑evaluation is advised, as further intelligence—such as page content or observed transaction hashes—may emerge and refine the threat profile.