exdswallet[.]godaddysites[.]com

Analysis of the domain exdswallet.godaddysites.com indicates that it was a high-risk crypto drainer site. The domain did not impersonate a specific brand but was likely used to trick users into divulging cryptocurrency wallet information or installing malicious software. Infrastructure analysis reveals that the domain was hosted on an IP address located in the United States, specifically 13.248.243.5, which is part of the AS16509 Amazon.com, Inc. network. The domain was registered through GoDaddy.com, LLC and created on February 21, 2026. The SSL certificate was issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2.

VirusTotal reports that 17 out of 95 security vendors flag this domain as malicious. The domain appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The site is currently offline, and the page title displays '404 Not Found.' The domain was created on February 21, 2026, and has been taken down, likely due to detection and intervention by security platforms.

Although the domain is currently offline, it remains important to monitor for any potential resurrection or similar campaigns using related infrastructure. Users who may have interacted with the site should check their cryptocurrency wallets for any unauthorized transactions and consider changing their passwords and enabling multi-factor authentication. Security teams are advised to continue blocking and monitoring this domain and any associated IP addresses to mitigate remaining risk.