exodusfinance[.]vercel[.]app

The domain exodusfinance.vercel.app was registered on 2026-06-18 through Vercel Inc. and resolves to IP address 216.198.79.67, which is hosted by Amazon.com, Inc. (AS16509) in the United States. The site presents a valid SSL certificate issued by Google Trust Services under the WR1 designation and returns HTTP 200 responses. Automated analysis identifies a stack comprising React, Vercel, Gatsby, HSTS, and Webpack, confirming a modern web‑application framework. The page title, "Exodus: the world's leading bitcoin and crypto wallet," directly references the Exodus brand, and the threat classification is recorded as brand impersonation with a high risk rating. VirusTotal reports that 14 of 91 security vendors flag the domain, and it appears on three external blocklists, with active blocking by PhishDestroy, MetaMask, and SEAL. Current status is active. No nameserver data is available (NS_NOT_FOUND), and the site’s internal content beyond the title has not been examined. Defenders should add the domain to network‑level blocklists, enforce URL filtering, and alert users that any unsolicited request originating from this host is likely malicious. Continuous monitoring of the IP address and associated ASN is advised, as the infrastructure is hosted on a shared cloud provider that could be repurposed for further malicious campaigns.