wallet-exo[.]com

This domain, wallet-exo.com, is flagged as a brand impersonation threat targeting Google. Analysis indicates the infrastructure was designed to mimic legitimate Google services, likely to harvest user credentials or distribute malicious payloads. The page title explicitly displayed 'Google,' reinforcing the deceptive intent to mislead victims into believing they were interacting with authentic Google properties.

Technical indicators reveal the domain was registered on August 21, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu. It resolved to the IP address 142.250.184.196 and was detected by 9 out of 95 security vendors on VirusTotal. The domain appeared on one security blocklist and was assigned a trust score of 0/100 by Gridinsoft. Despite its current offline status, no evidence confirms removal from Google Safe Browsing or other detection systems at the time of analysis.

The domain has been taken offline, likely following detection and reporting by security systems. However, residual risk persists due to the potential for infrastructure reuse or re-registration under a different name. Users are advised to verify domain authenticity before entering credentials, enable multi-factor authentication, and monitor accounts for unauthorized activity. Organizations should update blocklists to include this domain and its associated indicators to prevent future exposure.