exodus-secured[.]com

This domain, exodus-secured.com, is flagged as a brand impersonation threat specifically targeting Exodus, a widely used cryptocurrency wallet provider. Analysis indicates the site was designed to deceive users into believing they are interacting with legitimate Exodus infrastructure, likely with the intent to harvest wallet credentials or deploy crypto-draining scripts. The domain mimics official branding, creating a false sense of security to facilitate unauthorized access to user funds or sensitive recovery phrases. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on March 24, 2025, through Dynadot Inc, and resolves to the IP address 103.224.212.116. VirusTotal detection shows 5 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. The page title, exodus-secured.com, further reinforces the impersonation attempt by incorporating the brand name in a manner consistent with phishing campaigns targeting crypto wallet users. Users who visited exodus-secured.com should immediately revoke any wallet permissions granted through the site. If wallet credentials or recovery phrases were entered, affected users must transfer assets to a new, secure wallet and monitor all linked accounts for unauthorized transactions. Browser data, including cookies and cached content, should be cleared to eliminate residual session tokens. Additionally, users are advised to review connected applications within their wallet settings and revoke access to any unknown or suspicious services. No further interaction with the domain should occur, as it remains a verified threat vector for crypto asset compromise.