# exodussecure.wordpress.com — MALICIOUS

> Avoid exodussecure.wordpress.com. This domain impersonates Exodus and has been flagged on security blocklists. Access is now disabled for safety.

## Summary
PhishDestroy identifies exodussecure.wordpress.com as a medium-risk brand impersonation domain targeting Exodus users. The site aimed to deceive victims by mimicking the trusted Exodus brand to potentially harvest sensitive information.

The domain was registered through Automattic Inc. on February 21, 2026, and resolved to IP 192.0.78.12. It appeared on two security blocklists and was flagged by 5 out of 95 security vendors on VirusTotal, indicating moderate detection by automated systems.

Currently, the domain is offline and no longer accessible. Users are advised to avoid interacting with any links associated with this domain and to verify official Exodus communications directly from their verified platforms.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 410)
- Target brand: Exodus

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Automattic Inc.
- Country: US
- IP: 192.0.78.12
- IP Country: US
- IP City: San Francisco
- IP Org: AS2635 Automattic, Inc
- Nameservers: ["lb.wordpress.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "Emsisoft", "Fortinet", "Netcraft"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c583c-0ccf-7129-8042-e627d85198eb.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/47f307bc-1427-44ec-b103-996882f000ce
- PhishDestroy: https://phishdestroy.io/domain/exodussecure.wordpress.com/
- LLM endpoint: https://phishdestroy.io/domain/exodussecure.wordpress.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exodussecure.wordpress.com/
Last updated: 2026-03-19