official-ex-odus-en[.]typedream[.]app
“404: This page could not be found.”
Evidence Summary
Analysis of official-ex-odus-en.typedream.app indicates a confirmed brand impersonation campaign targeting Exodus wallet users. The domain, registered on February 21, 2026, through Squarespace Domains II LLC, was flagged by 16 of 95 security vendors on VirusTotal and appears on at least one security blocklist, including PhishDestroy. As of July 24, 2026, the domain returns an HTTP 404 status with the page title '404: This page could not be found,' suggesting it may have been taken offline or is in a dormant state.
The SSL certificate is classified as WE1, and infrastructure analysis reveals the use of Node.js, React, Next.js, Google Cloud services (including Cloud Trace and CDN), and Cloudflare for hosting and content delivery. While the exact content of the phishing page is not available for review, the domain name and associated intelligence confirm its intent to impersonate Exodus, a cryptocurrency wallet provider. Defenders should treat this domain as malicious and prioritize blocking it at the network and endpoint levels.
The combination of brand-specific naming, detection by multiple security vendors, and the use of cloud-based hosting infrastructure aligns with known phishing tactics. Although the domain is currently offline, historical DNS and WHOIS records should be preserved for forensic analysis, and monitoring for reactivation or related domains is recommended.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 13, 2026
10 monitored external feeds No match
Detection timeline
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
Technologies
10 high-confidence technologies identified
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of official-ex-odus-en.typedream.app · checked Mar 2, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive