exoduswaletq[.]vercel[.]app

This domain, exoduswaletq.vercel.app, is identified as an active high-risk phishing resource specializing in brand impersonation. The site mimics Exodus, a widely used cryptocurrency wallet platform, with the intent to deceive users into disclosing sensitive credentials or transferring digital assets to attacker-controlled addresses. Analysis confirms the domain remains operational and continues to pose a direct threat to individuals interacting with cryptocurrency services. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. and currently resolves to the IP address 64.29.17.3, hosted by a provider in the United States. The domain was created on February 21, 2026, though its malicious activity has already been detected by multiple security mechanisms. As of the latest assessment, 12 of 95 security vendors on VirusTotal have flagged the domain as malicious. Additionally, the resource appears on three distinct security blocklists and is actively blocked by browser-based and wallet-level protection systems. The SSL certificate, issued by Google Trust Services under the WR1 intermediate, does not mitigate the underlying threat, as the domain’s content remains designed to exploit trust in the Exodus brand. Current status indicates the domain remains active and continues to resolve without interruption. Users are strongly advised to avoid interaction with exoduswaletq.vercel.app and any associated subdomains or redirects. Network-level blocking of the IP 64.29.17.3 is recommended for organizations seeking to prevent access. Individuals who may have engaged with the site should immediately revoke any exposed credentials, review connected wallet permissions, and monitor accounts for unauthorized transactions. Ongoing monitoring of this domain and related infrastructure is advised, as further iterations or similar impersonation attempts may emerge.