exodus-windows[.]space
“Problem loading page”
Evidence Summary
The domain www.exodus-windows.space impersonates the Exodus brand and has a high threat score of 70/100. The site is currently down, indicating it may have been taken down following detection. VirusTotal reports only 1 out of 95 vendors flagged this domain as malicious, with SOCRadar being one of the vendors. It is listed on one public blocklist, but Google Safe Browsing has not flagged it.
Registered with REGRU-RU, the domain was created on February 21, 2026, and was first seen on February 3, 2026. The hosting IP address is 91.84.105.178. Given the high threat score and its association with a well-known brand, block the domain at the perimeter and submit a report to the registrar's abuse desk.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 12, 2026
10 monitored external feeds No match
Detection timeline
-
Cloudflare Radar
Cloudflare Radar scan stored · Open scan
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive