exodusfm[.]com

The domain exodusfm.com is actively impersonating the Exodus brand and is classified as a crypto‑related scam. Infrastructure analysis shows the domain resolves to the Cloudflare edge address 172.67.198.165, is served through Cloudflare’s DNS with nameservers annabel.ns.cloudflare.com and coen.ns.cloudflare.com, and presents a Google Trust Services / WE1 SSL certificate. The site returns HTTP 200 and reports the page title "EXODUS". Automated scans have flagged the domain by 14 of 95 security vendors on VirusTotal, and it appears on three external blocklists, with additional blocking by PhishDestroy, MetaMask, and SEAL. The certificate and hosting indicate a legitimate CDN, but the low Gridinsoft trust score of 0/100 and the recent registration date of 27 October 2025 suggest a purpose‑built operation. Detected technologies include Ant Design, Unpkg, Cloudflare Browser Insights, and HTTP/3, consistent with a modern web stack but offering no indication of malicious code. The domain’s registration through NameSilo, LLC provides no further attribution. While the page content has not been examined, the combination of brand impersonation, crypto‑scam labeling, and multiple vendor detections warrants a high‑risk rating. Defenders should block exodusfm.com at the network perimeter, add it to threat intelligence feeds, and monitor for any associated indicators of compromise that may appear in credential‑phishing or crypto‑drain attempts.