backupcenter-exodus[.]vercel[.]app

This domain, backupcenter-exodus.vercel.app, poses a significant threat by impersonating the Exodus cryptocurrency wallet platform. The site is designed to deceive users into believing they are interacting with a legitimate Exodus service, potentially leading to unauthorized access to sensitive wallet credentials or the execution of malicious transactions. Such brand impersonation attacks often aim to harvest login details, private keys, or trick users into transferring funds to attacker-controlled addresses. Given the nature of cryptocurrency transactions, any compromise could result in irreversible financial loss. Analysis indicates this domain was registered on February 21, 2026, through Tucows Domains Inc., a detail that contrasts with the typical age of legitimate Exodus-related domains. The domain is flagged by 15 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. Additionally, it appears on two security blocklists, PhishDestroy and PhishingDB, and resolves to the IP address 64.29.17.195, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the domain's fraudulent intent. The page title, 'Deployment Unavailable,' suggests the site may have been taken down or is intentionally masking its true content from automated scanners. If you visited backupcenter-exodus.vercel.app or interacted with any content linked to this domain, immediate action is required. First, disconnect the affected device from the internet to prevent further data transmission. Scan the device using updated security tools to detect and remove any malware or unauthorized scripts. If you entered any credentials or private keys, assume they are compromised and cease using them immediately. For cryptocurrency users, transfer funds to a new wallet with a fresh seed phrase and monitor all accounts for unauthorized transactions. Report the incident to relevant security teams or platforms to aid in mitigating further risks. Always verify the authenticity of URLs and use official sources for accessing cryptocurrency services.