exoduswalletat[.]wordpress[.]com

PhishDestroy identifies exoduswalletat.wordpress.com as a live crypto wallet impersonation site designed to steal credentials under the Exodus brand. The fraudulent page mimics the official Exodus Wallet Online Version login interface, tricking users into entering sensitive recovery phrases or private keys. This domain is part of a growing trend of crypto drainers that harvest authentication data to empty digital asset wallets within minutes of compromise. This domain was flagged by 4 of 95 VirusTotal security vendors, registered through MarkMonitor, Inc. on March 03, 2000, and currently appears on two active blocklists including MetaMask and SEAL. Despite its age—registered in 2000—the domain remains active and serves a Let's Encrypt SSL certificate, lending false credibility to its fraudulent operation. The impersonation is further supported by the misleading page title Exodùs Wallet | Online Version | Log In, which uses an accented 'ù' to bypass simple keyword filters. Users who visited this domain should immediately revoke any exposed wallet connections through their wallet’s security settings and transfer remaining assets to a newly generated, offline wallet. Scan devices for malware using reputable antivirus tools and enable multi-factor authentication on all crypto-related accounts. Never reuse recovery phrases across services and verify website URLs against official sources before entering sensitive information. The domain’s long registration period and SSL certificate underscore how attackers exploit trust in aged domains to evade detection.