exodus-v.co.com
“exodus-v.co.com”
exodus-v.co.com — Bilinen son aktif (HTTP 301). Marka kimliğine bürünme: Exodus; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 3/90 (alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 78/100. Kayıt kuruluşu: Moniker Online Services.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Kanıt özeti
exodus-v.co.com is a tenant hostname on Moniker Online Services LLC, not a separately registered domain. PhishDestroy first observed the hostname on Aug 23, 2026. The hostname explicitly references Exodus; stored content metadata identifies the same apparent target. The captured page title is “exodus-v.co.com”. Stored page analysis classifies the content as impersonation. Campaign clustering links the hostname to the Unknown kit. Current evidence score: 78/100 (critical).
Positive findings are stored from 4 sources: VirusTotal, MetaMask, SEAL, and Spamhaus DBL. VirusTotal recorded 3 detections among 90 engines: alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft on Sep 6, 2026 at 02:10 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Sep 21, 2026 at 06:20 UTC. Spamhaus DBL: DBL_PHISH on Aug 27, 2026 at 22:30 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Aug 29, 2026 at 03:53 UTC. URLScan completed without a malicious verdict (score 0) on Sep 19, 2026 at 03:30 UTC.
HTTP 301 was recorded on Sep 21, 2026 at 01:48 UTC. Moniker Online Services LLC is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 45.74.7.27 on AS202412 (Omegatech LTD). The recorded endpoint location is London, GB. The IP and ASN identify shared Moniker Online Services LLC infrastructure, not the tenant operator. The stored server header is Microsoft-IIS/10.0. DOM analysis on Sep 17, 2026 at 02:20 UTC returned 78/100. The evidence archive retains 1 visual capture from PhishDestroy. The platform TLS certificate was issued by Let's Encrypt with validity through Nov 18, 2026; checked Aug 27, 2026 at 22:02 UTC.
The content indicators and 4 positive source findings support the current Exodus-themed impersonation classification.
Forensic History & Detection Timeline
-
Threat First Observed Aug 27, 2026 · 21:03 UTCDomain ingestion complete. Initial state is marked as alive.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
Apache/2.4.52 (Ubuntu)
Scanner note: redirect: raw=redirect_301; http=301; via=http_proxy; location=https://exodus-v.co.com/; server=Apache/2.4.52 (Ubuntu)
Teknolojiler · 3 identified
VirusTotal Analizi
Benzer alan adları
88 kayıtlı benzer alan adı
Tümünü göster (76)
Topluluk istihbaratı
10 topluluk raporu
KategoriPHISHING
We are writing to report a phishing website that is impersonating Exodus and is being prepared to steal cryptocurrency from its users. The domain exodus-v[.]co[.]com surfaces in Bing search under the Exodus Wallet name, so a person looking for the wallet is shown this address as
Kanıtlar ve Dış Raporlar
“We are writing to report a phishing website that is impersonating Exodus and is being prepared to steal cryptocurrency from its users. The domain exodus-v[.]co[.]com surfaces in Bing search under the Exodus Wallet name, so a person looking for the wallet is shown this address as though it were the official one. Opened directly, the domain does not yet serve a working page — it returns a holding screen reading "Site temporarily unavailable". Set against a registration date one day earlier, this”
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin