exoduswallet[.]at

The domain exoduswallet.at is currently classified as a high‑risk brand‑impersonation site targeting the Exodus cryptocurrency wallet brand. The page title returned by the server is 'www.www.exoduswallet.at', confirming the domain name is actively advertised. The site is live as of the report date, July 12 2026, and is listed as active in threat intelligence feeds. Technical analysis shows the domain was registered on 27 August 2025 through Cloudflare, Inc., and is served by the authoritative nameservers greg.ns.cloudflare.com and lauryn.ns.cloudflare.com. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The web server presents a Google Trust Services / WE1 SSL certificate, enforces an HTTP 301 redirect, and supports HTTP/3 over the Cloudflare network. Detection metrics reinforce the malicious assessment: the domain appears on three security blocklists (PhishDestroy, CryptoFirewall, PhishingDB) and has been referenced in 17 AlienVault OTX threat‑intelligence pulses. VirusTotal scans have resulted in 16 out of 95 security vendors flagging the domain as malicious. Scamadviser assigns a trust score of 1 / 100, underscoring the low credibility of the site. Defenders should treat exoduswallet.at as a confirmed threat. Immediate actions include adding the domain and its resolving IP 188.114.97.3 to network‑level deny lists, configuring DNS sinkholing for the associated nameservers, and monitoring outbound traffic for HTTP/3 connections to Cloudflare’s edge. While the page content has not been examined beyond the title, the observed infrastructure and detection history provide sufficient evidence to warrant proactive blocking and user‑awareness messaging.