exodusns[.]com

The domain exodusns.com was registered on May 18, 2025 through Gname.com Pte. Ltd. and is currently hosted behind Cloudflare infrastructure (AS13335, United States). DNS resolution points to IP address 188.114.96.3, which is served by Cloudflare and supports HTTP/3. The domain presents an SSL certificate issued by Google Trust Services under the WE1 label, indicating a legitimate‑looking HTTPS endpoint. Page metadata reveals the title "OTC Markets," which does not align with the advertised brand target, Exodus, suggesting the site was being used to lure victims under a crypto‑related pretext.

Scamadviser assigns the domain a trust score of 21 out of 100, reflecting a low reputation, and it appears on a single security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that one out of ninety‑five scanning engines flagged it as malicious, reinforcing the suspicion of a crypto scam. The identified scam type is a crypto scam, consistent with the brand impersonation of Exodus, a well‑known cryptocurrency wallet provider.

While the exact payload or phishing page content has not been publicly disclosed, the convergence of low trust score, blocklist presence, and a single vendor detection indicates a non‑trivial threat. Defenders should continue to enforce DNS‑level blocks for exodusns.com, monitor for any re‑registration attempts, and ensure that endpoint security solutions update their signatures to include this indicator. Because the site is currently taken offline, immediate infection risk is reduced, but threat actors may reactivate the domain or clone its infrastructure; thus, proactive blocking and continuous threat‑intel monitoring are recommended.