novaexodus[.]pro

The domain novaexodus.pro is a phishing site engaged in brand impersonation targeting Exodus, a cryptocurrency wallet provider. It was designed to deceive users into believing they were interacting with the legitimate Exodus platform, likely to harvest sensitive information or credentials related to cryptocurrency transactions. As of the latest verification, novaexodus.pro has been taken offline, though it previously posed an elevated risk as a cryptocurrency scam.

Technical analysis of novaexodus.pro reveals limited detection by security vendors, with 2 of 95 VirusTotal vendors flagging the domain, including Gridinsoft and MalwareURL. The domain was registered through OwnRegistrar, Inc. on May 9, 2025, and resolved to the IP address 107.172.61.186, hosted on AS36352 (HostPapa) in the US. It appeared on one security blocklist, PhishDestroy, and had no SSL certificate issued. The observed page title was 'NOVA EXODUS - Wallet', reinforcing its impersonation of Exodus. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with novaexodus.pro should take immediate steps to secure their accounts and assets. For cryptocurrency-related phishing, revoke any active token approvals and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for unauthorized transactions or suspicious activity. Report the domain to relevant platforms, such as the impersonated brand (Exodus), security blocklists, and local cybercrime authorities to aid in mitigation efforts.