exodus-showcase[.]com

The domain exodus-showcase.com was registered on March 11, 2026 through Cloudflare, Inc. and is currently active with an HTTP 301 redirect. The page title returned by the server is "Exodus | Showcase", directly referencing the Exodus brand, which aligns with the reported brand_impersonation threat type. The site is classified as a high‑risk cryptocurrency scam targeting users of the Exodus brand.

Infrastructure analysis shows that the domain resolves to the IP address 172.67.196.200, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is delegated to frank.ns.cloudflare.com and jessica.ns.cloudflare.com, both Cloudflare name servers. The TLS certificate presented is issued by Google Trust Services under the WE1 leaf, confirming that the site is served over HTTPS despite its malicious intent.

Reputation data indicates that exodus-showcase.com appears on three independent security blocklists, specifically PhishDestroy, MetaMask, and SEAL. VirusTotal scans have resulted in 7 out of 95 security vendors flagging the domain as malicious, and AlienVault OTX references the domain in a single threat‑intelligence pulse. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the consensus that the domain is unsafe.

Defenders are advised to add exodus-showcase.com to network and endpoint blocklists, enforce URL filtering rules that deny connections to the identified IP range, and monitor for any traffic that resolves to Cloudflare name servers with similar creation dates. Continuous telemetry collection from DNS logs and TLS handshake monitoring can help detect future iterations that reuse the same infrastructure. Updating intrusion‑prevention signatures to include the observed domain attributes will reduce exposure to this high‑risk impersonation campaign.