exodus-ten-five-sigma-dfasf-98457-343564-goa[.]vercel[.]app

The domain exodus-ten-five-sigma-dfasf-98457-343564-goa.vercel.app was registered on February 21, 2026 through Tucows Domains Inc. It resolves to IP 64.29.17.131, which belongs to the United States and is announced by AS16509 Amazon.com, Inc. The site serves HTTP 200 responses and presents a TLS certificate issued by Google Trust Services under the WR1 intermediate. Infrastructure fingerprints include Vercel hosting and the presence of HTTP Strict Transport Security (HSTS). A Gridinsoft trust score of 0 / 100 indicates a severely untrusted host. VirusTotal records show 18 of 93 security vendors flag the domain as malicious. The page title "Connect Your Exodus" aligns with the declared brand target, Exodus, and the scam type is identified as a crypto scam. The domain is currently active, classified as high‑risk, and appears on three security blocklists. It is already blocked by PhishDestroy, MetaMask, and SEAL. Defenders should immediately block the domain and its resolved IP at perimeter defenses, add the host to internal threat intelligence feeds, and monitor outbound connections for any attempts to contact the same IP range. Given the limited public content, further sandbox analysis of the landing page is recommended to determine whether credential‑stealing or cryptocurrency‑draining payloads are delivered. Continuous re‑evaluation is advised as the site may evolve its tactics.