securing-exodus[.]com

This domain, securing-exodus.com, is actively flagged as a high-risk crypto scam impersonating the Exodus wallet brand. Registered on October 3, 2025, through Internet Domain Service BS Corp., the domain resolves to IP 142.250.185.100, hosted on Google LLC infrastructure (AS15169). Analysis indicates the site lacks an SSL certificate, a common red flag for fraudulent operations, and returns an HTTP 200 status, suggesting it is currently operational. The page title is listed as 'Google,' which may indicate an attempt to mislead users or evade detection through generic naming.

Infrastructure review shows the domain uses nameservers dns1.icedns.is and dns2.icedns.is, which may warrant further investigation for associated malicious activity. The domain appears on one security blocklist (PhishDestroy) and is flagged by 15 of 95 security vendors on VirusTotal, though the specific detection rules are not detailed in available intelligence. AlienVault OTX records show the domain in 15 threat intelligence pulses, reinforcing its classification as a confirmed threat. Defenders should treat this domain as an active crypto scam targeting Exodus users.

Immediate actions include blocking the domain at the DNS and proxy levels, monitoring for connections to the resolving IP, and reviewing logs for any internal access attempts. The absence of SSL and the use of generic page titles further support its malicious classification. While the exact content of the site remains unanalyzed, the combination of brand impersonation, crypto scam classification, and detection by multiple vendors provides sufficient evidence for remediation. No legitimate use case is identified for this domain.