officialexodus[.]org

officialexodus.org is currently active and classified as a high‑risk brand‑impersonation campaign targeting the cryptocurrency wallet provider Exodus. The site presents the page title “Professional Gaming Clan Website”, which does not align with the claimed brand, indicating a potential lure. DNS resolution points to 18.208.88.157, an address owned by Amazon.com, Inc. (AS14618) located in the United States; the domain was created on 18 July 2025 through Name.com, Inc. and uses the authoritative nameservers dns1.p06.nsone.net through dns4.p06.nsone.net. The web server presents a Let’s Encrypt certificate (issuer E8) and the page is served over HTTPS with HSTS enabled; Netlify is detected as the hosting platform. VirusTotal reports a single vendor detection out of 95 scans, and the domain is listed on one security blocklist; Gridinsoft assigns a trust score of 0 / 100 and PhishDestroy has already blocked the site. The combination of brand impersonation, a mismatched page title, and a low trust score suggests a crypto‑related scam, but the exact phishing kit or credential‑capture mechanism has not been observed. Defenders should block traffic to officialexodus.org at the network perimeter, monitor DNS queries for the associated IP and nameservers, and add the domain to internal allow‑list exclusions for legitimate Exodus communications. Continued observation is advised to capture any future payloads or redirects that may reveal additional infrastructure.