# exodus.com.ag — SUSPICIOUS

> exodus.com.ag mimics the legitimate crypto wallet Exodus to steal digital assets. Registered on March 18, 2025, it shows 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies exodus.com.ag as an active fake wallet site designed to steal cryptocurrency credentials. Visitors risk direct financial loss if they enter wallet seeds or passwords.  

This domain was flagged by our automated systems after VirusTotal returned 0 out of 95 security engines detecting the threat. The domain was registered through Hosting Concepts B.V. d/b/a Registrar.eu on March 18, 2025, less than 48 hours ago. It resolves to IP address 158.94.209.135 and uses a Let’s Encrypt SSL certificate—common tactics used to appear legitimate.  

If you visited exodus.com.ag, do not enter any wallet recovery phrases, passwords, or private keys. Disconnect from the site immediately and scan your device for malware. Revoke any API keys or credentials exposed to this domain. Report the incident to your wallet provider and consider transferring remaining funds to a new, secure wallet. Always verify URLs and use only official websites or app stores for crypto software.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-18 20:59:14
- Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
- IP: 158.94.209.135

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e536dfbf-0861-4e66-b409-4387a20d8329
- PhishDestroy: https://phishdestroy.io/domain/exodus.com.ag/
- LLM endpoint: https://phishdestroy.io/domain/exodus.com.ag/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exodus.com.ag/
Last updated: 2026-03-22