exodusyslogrn[.]gitbook[.]io

exodusyslogrn.gitbook.io is a subdomain of gitbook.io. PhishDestroy first recorded this hostname on Jun 15, 2026. The hostname explicitly references Exodus; stored content metadata identifies the same apparent target. The stored content classification is brand impersonation. The assembled evidence scores 100/100 (critical).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 17 detections among 91 engines: ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Emsisoft, G-Data, Kaspersky, LevelBlue, Netcraft, Webroot on Jul 18, 2026 at 16:05 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. The evidence is not unanimous. Google Safe Browsing returned no flag on May 28, 2026 at 05:00 UTC.

HTTP 307 was recorded on Aug 7, 2026 at 16:46 UTC. Registration records for the registrable domain gitbook.io list GitBook as the registrar and May 27, 2026 as the creation date. Registration preceded first observation by 18 days. At collection time, the hostname resolved to 104.18.40.47 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The stored server header is cloudflare. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Aug 17, 2026; checked Jul 12, 2026 at 13:00 UTC.

Neither a page title nor a landing-page capture is stored. Taken together, the page content and independent findings support classifying this hostname as Exodus-themed brand impersonation.