exodusbase[.]org

PhishDestroy identifies exodusbase.org as a live malicious domain currently under active phishing investigation. The site poses as a legitimate Exodus Wallet interface and is designed to deceive cryptocurrency users into entering private keys or downloading trojanized wallet software. Status remains active pending ongoing behavioral analysis and takedown escalation. exodusbase.org was registered on April 02, 2026 through DynaDot LLC and resolves to IP address 185.114.97.3. As of the latest scan, the domain shows 0 detections out of 95 VirusTotal vendors, has obtained a Let's Encrypt SSL certificate, and has not yet been listed on major threat intelligence blocklists. Its low detection rate suggests recent deployment with minimal historical exposure to detection engines. Until conclusive deactivation, all users are strongly advised to immediately block access to exodusbase.org at network and endpoint levels. Exercise heightened vigilance when interacting with links or files related to Exodus Wallet or cryptocurrency transactions. Report any suspicious activity involving this domain to your security team and relevant platform abuse channels. Monitor official Exodus Wallet communication channels for customer advisories and security updates. The risk level remains under investigation and may escalate pending further forensic analysis and evidence of active exploitation.