eng-web-exodus-web3[.]wasmer[.]app

This domain, eng-web-exodus-web3.wasmer.app, is actively impersonating Exodus, a multi-chain Web3 wallet provider, as indicated by its page title 'How to Use Exodus Web3 Wallet — Multi-Chain, Self-Custody.' The domain was registered on March 21, 2026, through Squarespace Domains II LLC and currently resolves to an IPv6 address (2001:bc8:701:70a:d604:e6ff:fed6:89d0) hosted on AS12876 (Scaleway SAS) in France. The site presents a valid SSL certificate issued by Let's Encrypt (serial YE2), which does not mitigate its fraudulent intent but ensures encrypted connections. Infrastructure analysis reveals the domain is served via nameservers alpha.ns.wasmernet.com and beta.ns.wasmernet.com, a pattern consistent with bulletproof or low-reputation hosting providers. The domain appears on at least one security blocklist and is flagged by 15 of 91 vendors in a recent scan, confirming its malicious classification. No legitimate association with Exodus or its official services has been identified. Defenders should treat this domain as a high-risk brand impersonation threat, prioritize blocking at DNS and network levels, and monitor for related infrastructure reuse under the wasmernet.com nameserver cluster. The exact content or functionality of the site remains unanalyzed, but the combination of brand-specific page title, recent registration, and security vendor detections supports immediate containment action.