exodus[.]co[.]mz

PhishDestroy identifies exodus.co.mz as an active brand impersonation scam targeting Exodus wallet users. This domain was flagged for mimicking the legitimate Exodus brand to deceive victims into surrendering sensitive wallet credentials or private keys. The site leverages a nearly undetected attack chain, relying on social engineering and urgency to trick users into completing fraudulent transactions. While technical details remain under analysis, the impersonation closely mirrors official Exodus branding to maximize credibility and conversion rates among cryptocurrency users. exodus.co.mz exhibits several critical technical indicators that warrant urgent scrutiny. The domain, registered through MozDomains, was created on May 20, 2026, and resolves to IP address 198.251.84.236. It utilizes a Let's Encrypt SSL certificate to appear legitimate, and currently registers 0 detections out of 95 on VirusTotal—indicating recent deployment or low detection by security engines. As of this assessment, this domain remains unblocked by Google Safe Browsing and is not yet flagged by major threat intelligence platforms. The combination of a recently created domain, low detection rate, and direct Exodus impersonation suggests an evolving attack vector with high evasion potential. This domain remains active and poses a significant imminent threat to cryptocurrency users. PhishDestroy has flagged exodus.co.mz for immediate remediation, including domain takedown requests and network-level blocking. However, due to the low initial detection footprint and reliance on brand trust, users are strongly advised to verify all crypto-related domains via official channels before inputting sensitive information. The risk level remains under investigation but is currently classified as 'active', indicating ongoing exploitation in the wild. Users should treat exodus.co.mz as hostile and refrain from accessing or interacting with the site until further notice.