my-exodus[.]com[.]co

Analysis indicates that my-exodus.com.co is an active brand-impersonation domain targeting Exodus, a cryptocurrency wallet provider. Registered on February 21, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, the domain resolves to IP 94.154.172.113, hosted on AS209101 (IP Vendetta Inc.) in the Netherlands. The SSL certificate is issued by Let's Encrypt (YR2), a common choice for both legitimate and malicious sites. The page title, 'Brookfield Indian Motorcycle,' does not align with Exodus branding, suggesting either misdirection or an attempt to obscure the site's true purpose. The domain is flagged by at least one security blocklist and has been detected by 4 of 93 vendors on VirusTotal, though the specific detection categories remain unconfirmed. Gridinsoft assigns it a trust score of 0/100, reinforcing its high-risk classification. Nameservers (NS1.OPENPROVIDER.NL, NS2.OPENPROVIDER.BE, NS3.OPENPROVIDER.EU) are associated with a provider commonly used for both legitimate and malicious registrations. While the exact content of the site has not been analyzed, the available indicators—including the domain name, brand impersonation, and classification as a crypto scam—strongly suggest it is designed to deceive users into disclosing wallet credentials or transferring cryptocurrency. Defenders should treat this domain as malicious, block it at the network level, and monitor for related infrastructure. Further investigation into the hosting provider and nameserver patterns may reveal additional linked domains.