exoduss[.]co[.]com

Exoduss.co.com poses a high risk as a confirmed brand impersonation threat, specifically designed to mimic the legitimate Exodus cryptocurrency platform. Security researchers at PhishDestroy have identified this domain as a sophisticated phishing attempt aimed at stealing users' credentials and potentially draining their crypto wallets by tricking them into entering sensitive information on a fake Exodus interface. The site is currently offline, but its registration and hosting details indicate a clear intent to defraud.

Technical analysis reveals several red flags. VirusTotal reports that 15 out of 95 security vendors flag this domain as malicious, and it appears on three separate security blocklists, indicating widespread recognition of its harmful nature. The domain resolves to IP address 107.189.22.184 and was registered through Moniker Online Services LLC, a registrar often associated with questionable domains. Notably, the site lacks an SSL certificate, which is highly unusual for any legitimate financial service like Exodus. The page title reads "Site is being set up..."—a common placeholder used by scammers to buy time while they prepare their phishing pages. All these indicators point to a well-planned impersonation campaign.

Users who may have interacted with exoduss.co.com should take immediate action. Since this is a brand impersonation and crypto drainer threat, anyone who entered their Exodus wallet credentials or recovery phrases on this site must assume their accounts are compromised. They should transfer any remaining funds to a new wallet immediately and enable two-factor authentication wherever possible. It is also recommended to run a full security scan on any device used to access the site. For ongoing protection, always verify the official Exodus URL (exodus.com) and avoid clicking on links from unsolicited emails or messages. Report any similar domains to security teams to help prevent future scams.