exodu-articles[.]gitbook[.]io

The domain exodu-articles.gitbook.io is currently listed as active malicious infrastructure. It resolves to the Cloudflare address 104.18.40.47 located in Canada and presents a valid SSL certificate issued by Google Trust Services under the WE1 designation. HTTP requests receive a 307 temporary redirect response, indicating server‑side redirection behavior. The site is hosted through GitBook, as indicated by the registrar information, and the hosting provider is Cloudflare, Inc. Independent blocklists from PhishDestroy, MetaMask, and SEAL have already added the domain, and it appears on three additional security blocklists. VirusTotal analysis shows that 14 of 91 scanners flagged the domain as malicious, reinforcing the suspicion of phishing activity. No public page content or impersonated brand has been disclosed, so the exact victim‑targeting vector remains unknown. Defensive teams should block the domain at network perimeter, add it to URL filtering policies, and monitor DNS queries for the 104.18.40.47 address. Continued observation is recommended to capture any future payloads or credential‑harvesting pages that may be deployed behind the redirect.