exodusinvertir[.]com

The domain exodusinvertir.com was registered on November 09, 2024 through Automattic Inc. and resolves to the IP address 192.0.78.24, which is owned by AS2635 Automattic, Inc. in the United States. The domain is hosted on WordPress.com name servers (ns1.wordpress.com, ns2.wordpress.com, ns3.wordpress.com) and does not present an SSL certificate, indicating that traffic is unencrypted. Scamadviser assigns the site a trust score of 46 out of 100, reflecting low confidence in its legitimacy. VirusTotal analysis shows that one of ninety‑five security vendors flagged the domain, and it appears on a single security blocklist.

PhishDestroy has actively blocked the domain, and it is currently listed as offline. The site is identified as a crypto‑related scam that impersonates the Exodus brand, aligning with the reported brand‑impersonation threat type. Risk is assessed as elevated.

The available evidence confirms the domain’s association with malicious activity, but the lack of a live HTTP response limits deeper content analysis, such as page title or specific phishing kit details. Defenders should continue to monitor the IP address and associated name servers for any reactivation, enforce blocklist entries across network controls, and educate users about unsolicited communications that reference Exodus and request cryptocurrency transactions. Organizations using the Exodus brand should update their security awareness materials to reference this specific domain and consider adding the domain to internal deny lists to prevent accidental access.