exodusparcels[.]com

The domain exodusparcels.com is active and has been identified as a brand‑impersonation operation targeting the Exodus cryptocurrency brand. Infrastructure analysis shows the domain is delegated to Cloudflare name servers (clarissa.ns.cloudflare.com, julio.ns.cloudflare.com) and resolves to IP 156.244.185.92, which is registered to AS9294 GNET INC. in Hong Kong. The site is served over HTTPS with a certificate issued by Google Trust Services (WE1) and supports HTTP/3, indicating modern web stack usage. DNS resolution and hosting are provided by Cloudflare, and the HTTP response is a 301 redirect, suggesting the site may forward visitors to another location. The domain was registered on 21 February 2026 through InterNetX GmbH. Reputation signals include a Gridinsoft trust score of 0 / 100, a single blocklist entry, and detection by PhishDestroy. VirusTotal reports a single positive out of 95 scanners, reinforcing the suspicion that the domain is malicious. The page title returned by the server is "众博体育（ZBsports）-官方网站入口," which bears no direct relation to the Exodus brand and may be an attempt to obfuscate the site’s purpose. While the exact content of the landing page has not been examined, the combination of brand targeting, crypto‑scam classification, and the observed infrastructure points to a high‑risk phishing operation. Defenders should add exodusparcels.com to URL filtering and sinkhole lists, monitor for related C2 activity, and consider proactive takedown requests. Additional investigation of the redirected target and any credential‑capture mechanisms is recommended to fully assess the threat impact.