learn-exoduss[.]framer[.]media

The domain learn-exoduss.framer.media is a phishing site engaged in brand impersonation targeting Exodus, a cryptocurrency wallet provider. It operates as a cryptocurrency scam, attempting to deceive users into disclosing sensitive information or transferring funds under false pretenses. No drainer kit was identified in this campaign. The site is currently taken offline, though prior activity posed an elevated risk to visitors.

Technical indicators confirm the malicious nature of learn-exoduss.framer.media. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including ChainPatrol and alphaMountain.ai. The domain was registered through CSC Corporate Domains, Inc. on February 21, 2026, and resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc. infrastructure in the US. It appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Let's Encrypt (E7), and the observed page title was 'Site Not Found | Framer' with an HTTP 404 status. Technologies detected include Framer Sites, React, HSTS, and HTTP/3.

Users who interacted with learn-exoduss.framer.media should take immediate safety steps. Revoke any token approvals granted to unknown or suspicious contracts using a tool like Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Report the domain to Exodus support and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. Enable two-factor authentication on all accounts and remain vigilant for follow-up phishing attempts via email or social media.