swap-web3-exodus[.]typedream[.]app

PhishDestroy has identified swap-web3-exodus.typedream.app as a high-risk brand impersonation phishing domain, specifically targeting Exodus wallet users. The domain was created on February 28, 2026, and has already been taken offline, but the risk remains significant due to the sophisticated nature of the impersonation. Threat actors behind such domains often use them to harvest login credentials, seed phrases, or private keys from unsuspecting victims, potentially leading to permanent loss of cryptocurrency assets.

This domain was flagged by 15 out of 95 security vendors on VirusTotal, indicating broad recognition as malicious. It was registered through Squarespace Domains II LLC and resolved to IP address 188.114.96.3, which is associated with Cloudflare. The SSL certificate was issued by Google Trust Services (WE1), giving the site a deceptive appearance of legitimacy. The domain appeared on 3 security blocklists, and its page title displayed a 404 error, suggesting either a takedown or a temporary redirect. However, the domain's creation date is in the future (February 28, 2026), which is unusual and may indicate a typo or a placeholder date; nonetheless, it was actively detected as malicious.

To protect against such Exodus phishing threats, users should always verify the official Exodus website URL, never enter seed phrases or private keys on any third-party site, enable two-factor authentication on their Exodus wallet, and use browser extensions that block known phishing domains. If you have already entered credentials on this site, immediately transfer funds to a new wallet and revoke any permissions granted. Check the full report for more indicators and IoCs.