exodus-crypto-guide[.]com

This domain exodus-crypto-guide.com is currently active and hosts a page titled “Exodus Wallet Guide | How to Use Exodus Crypto Wallet”, indicating a brand‑impersonation campaign targeting users of the Exodus cryptocurrency wallet. The domain was registered on 21 April 2026 through Spaceship, Inc. and resolves to the IP address 188.114.96.3, which is geolocated to Canada and served via Cloudflare’s network (nameservers joan.ns.cloudflare.com and sri.ns.cloudflare.com). The site returns HTTP 200 and presents a valid SSL certificate issued by Google Trust Services under the WE1 identifier. Reputation services have flagged the domain: four of ninety‑four VirusTotal scanners raised detections, Gridinsoft assigns a trust score of 0 / 100, and it appears on a single security blocklist. The domain is already blocked by PhishDestroy. The limited detection count suggests a low‑profile deployment, but the presence of a legitimate‑looking certificate and active hosting increases the likelihood of successful credential harvesting. Defenders should add the domain to outbound filtering rules, monitor DNS queries for the host name, and correlate any authentication attempts to Exodus services with this indicator. Because the underlying malicious page content has not been publicly analyzed, further investigation of the landing page is recommended to confirm any credential‑capture mechanisms. Continuous observation is advised, as the infrastructure could be repurposed for broader campaigns.