exodusbt[.]com

The domain exodusbt.com is actively serving content over HTTPS (certificate issued by Google Trust Services / WE1) and returns HTTP 200 responses. It resolves to IP 162.159.140.166, an address owned by AS13335 Cloudflare, Inc., located in the United States. Registration data shows creation on 2026‑02‑21 through GoDaddy.com, LLC, with authoritative nameservers ns31.domaincontrol.com and ns32.domaincontrol.com. Automated fingerprinting identified a stack that includes Node.js, Vue.js, Nuxt.js, HighLevel, Google Cloud services, Google Cloud CDN, Cloudflare Browser Insights, and Cloudflare itself. The page title observed is "Exodus QRN — Enterprise Quantum-Resistant Network Solutions & Secure Communications Technologies," which aligns with the declared brand target Exodus and the classified scam type of a crypto‑related scheme. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, and the domain appears on three security blocklists, currently blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis reports four of ninety‑five scanners flagging the domain, reinforcing the malicious assessment. While the exact malicious payload or credential‑collection mechanisms are not yet publicly disclosed, the combination of brand impersonation, a crypto‑scam classification, and low trust metrics indicate a high‑risk threat. Defenders should block exodusbt.com at network perimeters, update URL filtering policies, and monitor for any traffic to the associated IP address. Continuous observation of the domain’s content and any changes in detection scores is advised to refine response actions.