Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@instra.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
exodas[.]gb[.]net
“Exodus Wallet - Secure Crypto Wallet 350+ Coins”
exodas.gb.net — Não verificado. Representação da marca: Exodus; Tipo de golpe: Crypto Scam. Resumo das evidências: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. Registrador: Instra.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain exodas.gb.net is a confirmed phishing site engaged in brand impersonation targeting Exodus, a cryptocurrency wallet provider. It poses as the legitimate Exodus platform to deceive users into disclosing sensitive information or transferring cryptocurrency under false pretenses. This site is classified as a cryptocurrency scam and is currently taken offline, though it previously operated without detection by major antivirus engines.
Exodas.gb.net was registered through Instra Corporation Pty Ltd. on February 26, 2026, and resolved to the IP address 172.67.220.164, hosted on Cloudflare's infrastructure in the US. At the time of analysis, 0 of 95 VirusTotal vendors flagged the domain, and Google Safe Browsing did not list it. However, it appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The site lacked an SSL certificate, and its observed page title was 'Exodus Wallet - Secure Crypto Wallet 350+ Coins'. Nameservers included betty.ns.cloudflare.com and ian.ns.cloudflare.com, with no valid MX records present.
Users who interacted with exodas.gb.net should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the domain to Exodus support, local cybercrime authorities, and platforms like Google Safe Browsing or PhishTank to aid in broader mitigation efforts.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Evidências e relatórios externos
PD-20260226-4243B4 Recipient: abuse@instra.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo