exodus-sync[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat specifically targeting Exodus, a cryptocurrency wallet provider. The site mimics legitimate Exodus wallet functionality, presenting a page titled 'Exodus – Import Wallet,' which is designed to deceive users into disclosing sensitive wallet credentials or private keys, likely leading to unauthorized asset transfers or complete wallet compromise. Analysis indicates the domain exodus-sync.vercel.app was registered on June 13, 2026, through Vercel Inc. and currently resolves to the IP address 216.198.79.195. Security vendor detection on VirusTotal stands at 5 out of 95, with the domain appearing on three distinct security blocklists. The SSL certificate is issued by Google Trust Services under the identifier WR1. Additional infrastructure analysis reveals the domain is actively blocked by multiple security and wallet protection mechanisms, confirming its malicious intent. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and associated IP address across all network security controls. Users should be alerted to verify the authenticity of any Exodus-related communications or interfaces, particularly those prompting wallet imports or credential submissions. Security teams are advised to monitor for related domains registered through Vercel or resolving to the same IP, as these may represent additional attack vectors. Wallet providers should implement additional verification layers for import requests to prevent unauthorized access.