exodus-wallet-exts[.]vercel[.]app

The domain exodus-wallet-exts.vercel.app has been identified as a high-risk brand impersonation threat specifically targeting Exodus cryptocurrency wallet users. Analysis confirms this domain presents a fraudulent interface titled 'Connect Your Exodus,' designed to deceive users into disclosing wallet credentials or private keys. Current intelligence indicates the domain has been taken offline, though prior activity remains a documented security concern. Infrastructure analysis reveals this domain was flagged by 13 of 95 security vendors on VirusTotal, indicating moderate detection coverage. The domain was registered through Tucows Domains Inc. and resolves to the IP address 64.29.17.131, hosted on Amazon.com, Inc. infrastructure (AS16509) located in the United States. The SSL certificate is issued by Google Trust Services under the WR1 root. Domain registration records show a creation date of February 21, 2026, though this timestamp may reflect manipulated or placeholder data. The domain appears on three security blocklists, including PhishDestroy and SEAL, further corroborating its malicious classification. As of the latest assessment, exodus-wallet-exts.vercel.app has been rendered inaccessible, likely following takedown procedures or suspension by the hosting provider. Security teams are advised to monitor for re-emergence under similar naming conventions or infrastructure. Users who may have interacted with this domain should immediately revoke any connected wallet permissions, rotate credentials, and conduct a thorough audit of associated accounts. Organizations are recommended to update blocklists with this domain and its resolved IP address to prevent future access attempts.