contactsupport-backupcentre-exodus[.]vercel[.]app

The domain contactsupport-backupcentre-exodus.vercel.app is currently operating as an active credential harvesting infrastructure specifically targeting Exodus cryptocurrency wallet users. Analysis indicates this is a brand impersonation threat designed to collect wallet recovery phrases, private keys, and login credentials through fraudulent support interfaces. The domain remains operational as of this report. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered through Vercel Inc. on April 08, 2026 and resolves to IP address 64.29.17.67 located in the United States. Security vendor analysis shows 18 of 95 VirusTotal engines have detected malicious activity, while the domain appears on three independent security blocklists. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of security to potential victims. Additional protective measures have been implemented by at least three specialized cryptocurrency security platforms. Risk assessment indicates high likelihood of successful compromise for users who interact with this infrastructure. The combination of brand impersonation, credential harvesting design, and active status presents significant risk to cryptocurrency holders. Recommended actions include immediate blocking of the domain and IP address at network perimeter devices, deployment of endpoint protection rules to prevent user access, and implementation of security awareness training emphasizing verification of official support channels. Cryptocurrency users should be advised to never enter recovery phrases or private keys on any website, regardless of apparent legitimacy, and to verify domain authenticity through official Exodus communication channels before any interaction.