official-exodus-walet[.]framer[.]ai
“Getting started with Exodus Web3 Wallet”
official-exodus-walet.framer.ai — Konten tidak tersedia. Peniruan identitas merek: Exodus; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 15/93 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, CyRadar, ESET); URLScan malicious verdict; CF Radar malicious; PhishDestroy score 95/100. Registrar: CSC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain official-exodus-walet.framer.ai was registered through CSC Corporate Domains, Inc. on April 04, 2023. It resolves to the Amazon Web Services address 52.223.52.2, which belongs to ASN 16509 operated by Amazon.com, Inc. and is geolocated in the United States. The authoritative name servers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns, confirming the use of AWS Route 53 DNS hosting. The site served a TLS certificate issued by Let’s Encrypt (certificate identifier E8), enforcing HSTS and supporting HTTP/3, and was built with Framer Sites and React.
The page title reported by the scanner is “Getting started with Exodus Web3 Wallet”, indicating an attempt to impersonate the Exodus cryptocurrency wallet brand. Classification from the intelligence feed labels the activity as a “Crypto Scam”. VirusTotal recorded 15 detections out of 93 scanning engines, and the domain appears on one security blocklist. PhishDestroy has already blocked the domain, and the current HTTP response is 404, with the overall status marked as offline.
No additional public analysis of the page content is available, and the exact phishing kit or credential‑harvesting mechanisms have not been observed. Defenders should add the domain and its resolved IP address to blocklists, update URL filtering rules for the “exodus” keyword, and monitor for other Framer‑based deployments that use similar naming patterns. Continued observation of the associated AWS ASN for new domains created with comparable timestamps is advisable, as the infrastructure suggests a reusable hosting profile. Because the site is currently offline, rapid takedown is less critical, but the evidence indicates a broader campaign targeting cryptocurrency users, and proactive measures can reduce exposure to future iterations.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 4 identified
Framer is a no-code web design platform for designing and publishing responsive websites.
www.framer.com Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive