exodussluginnus[.]gitbook[.]io

Exodussluginnus.gitbook.io is flagged by 4 out of 91 VirusTotal vendors as malicious, indicating its use in a phishing scam targeting Exodus users. The domain is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. Although the domain is currently offline, its previous activity reflects a significant threat to those interacting with it.

The domain exploits the reputation of Exodus, a popular cryptocurrency wallet, to deceive users into divulging sensitive information. The use of Gitbook as a platform suggests an attempt to lend legitimacy to the phishing operation, potentially making it more convincing to unsuspecting users. The domain's registration through Cloudflare, Inc., and hosting on an IP address in the US underlines the infrastructure supporting this scam.

Despite its creation in 2014, the domain's malicious activity was first detected by PhishDestroy in June 2026, highlighting its recent pivot to phishing. The SSL certificate issued by Google Trust Services further suggests an effort to appear legitimate. The platform risk score of 68/100 underscores the potential danger posed by this domain when it was active. This case exemplifies the ongoing challenges in cybersecurity, where even established domains can be repurposed for malicious intent.