exodus[.]page

Analysis of exodus.page confirms active brand impersonation targeting Exodus, a cryptocurrency wallet provider. The domain, registered on December 4, 2023, through Name.com, Inc., resolves to Cloudflare infrastructure (AS13335) and is hosted on IPv6 address 2606:4700:20::ac43:453f. The page title, 'Exodus Wallet Guide | Secure Download & Setup,' directly references Exodus, aligning with the known scam type classified as a crypto scam. Security vendors have flagged this domain, with 14 of 95 detections on VirusTotal, and it appears in 19 threat intelligence pulses on AlienVault OTX. The domain is also blocked by at least one security blocklist. SSL certification is provided by Let's Encrypt (YE1), a common practice among both legitimate and malicious sites, offering no definitive indicator of legitimacy. The domain's trust scores from Gridinsoft and Scamadviser are both at the lowest possible rating (0/100 and 1/100, respectively), further corroborating its malicious classification. Defenders should treat this domain as a confirmed threat, prioritizing blocking at the DNS or network level, and alerting users to avoid interaction. The exact content and functionality of the site remain unanalyzed, but the available indicators strongly suggest it is designed to deceive users into downloading malicious software or divulging sensitive credentials.