# my-exodus.com.co — SUSPICIOUS

> Beware of my-exodus.com.co as it impersonates Exodus. The domain shows suspicious activity and is currently offline for safety.

## Summary
PhishDestroy identifies my-exodus.com.co as a medium-risk brand impersonation domain targeting the Exodus brand. The domain attempts to mimic Exodus but misleadingly displays content titled "Brookfield Indian Motorcycle," which is unrelated to the genuine service, highlighting deceptive intent. Created on February 21, 2026, this domain is classified as a fraudulent site designed to confuse users seeking Exodus services.

Technical analysis reveals the domain resolves to IP address 94.154.172.113 and appears on three separate security blocklists, indicating prior detection by security tools. Although VirusTotal flags this domain by 4 out of 95 security vendors, suggesting some recognition of malicious potential, it is not universally detected, complicating user risk assessment. The content mismatch and blocklist inclusion heighten suspicion of malicious or misleading activities.

Currently, my-exodus.com.co is offline, reducing immediate risk to users. This domain's removal from active status suggests responsive action either by hosting providers or security authorities. Users are advised to avoid visiting this domain and rely solely on official Exodus channels to prevent potential fraud or data compromise. Continuous monitoring is recommended as similar threats often reappear under new domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Exodus
- Page title: Brookfield Indian Motorcycle

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
- IP: 94.154.172.113
- IP Country: NL
- IP City: Amsterdam
- IP Org: AS209101 IP Vendetta Inc.
- Nameservers: ["NS1.OPENPROVIDER.NL", "NS2.OPENPROVIDER.BE", "NS3.OPENPROVIDER.EU"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["alphaMountain.ai", "Forcepoint ThreatSeeker", "Fortinet", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a069c-adc6-700c-9231-72e95e212f37.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e33abf4b-a38b-4e86-82b4-b3d24cd92dd5
- PhishDestroy: https://phishdestroy.io/domain/my-exodus.com.co/
- LLM endpoint: https://phishdestroy.io/domain/my-exodus.com.co/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/my-exodus.com.co/
Last updated: 2026-03-19