exdous[.]online
“Exodus Exchange”
Evidence Summary
The domain exdous.online was registered on April 11, 2026 through GoDaddy.com, LLC and is currently using the default GoDaddy nameservers ns55.domaincontrol.com and ns56.domaincontrol.com. DNS resolution points to the IPv4 address 84.247.185.233. The host presents a valid Let's Encrypt certificate issued by the YR2 automation, indicating the site is reachable over HTTPS. AlienVault Open Threat Exchange lists the domain in a single pulse, confirming that it has been observed in threat‑sharing feeds. VirusTotal analysis shows that one out of ninety‑one scanning engines flagged the domain, reinforcing the suspicion of malicious activity. The domain is classified as a generic_phishing site, with risk level marked high and status still active as of the reporting date. No additional open‑source intelligence on the payload, landing page content, or targeted brands has been published, so the exact phishing vector remains unknown. Defenders should block DNS resolution to exdous.online, monitor outbound connections to 84.247.185.233, and enforce email filtering rules that detect URLs pointing to the domain. Continuous re‑scanning of the host on VirusTotal and periodic checks of OTX feeds are recommended to capture any changes in detection status.
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260717-A99406- Captured page title
- Exodus Exchange
Legal basis
Full evidence text
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 12, 2026
8 monitored external feeds No match
Detection timeline
-
VirusTotal
1 → 4
-
Domain status
Reachable → Unreachable
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
3 high-confidence technologies identified
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of exdous.online · checked Jul 18, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive