xeoduswv3[.]gitbook[.]io

This domain, xeoduswv3.gitbook.io, is actively impersonating the Exodus cryptocurrency wallet brand as of July 12, 2026. Infrastructure analysis reveals it is hosted on Cloudflare infrastructure (AS13335) and resolves to IP 172.64.147.209, located in the US. The domain was registered on February 21, 2026, through Cloudflare, Inc., and employs Cloudflare nameservers (dahlia.ns.cloudflare.com, hugh.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services (WE1), and the site uses HTTP/3 with a 307 redirect status. The page title, 'Exodus Web3 Wallet: Empower The Crypto Experience | us,' explicitly references the Exodus brand, confirming the impersonation intent. The domain is flagged on three security blocklists and is currently blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0/100, further indicating malicious activity. VirusTotal reports 3 of 93 security vendors detecting the domain as malicious, though this does not represent exhaustive validation. Defenders should treat this domain as high-risk due to its active status, brand impersonation, and presence on multiple blocklists. Network-level blocking of 172.64.147.209 and the domain itself is recommended. The exact content and functionality of the site remain unanalyzed, but the combination of cryptocurrency branding and phishing indicators warrants immediate containment. No evidence suggests this is a legitimate Exodus-affiliated property.