official-ex-odus-en[.]typedream[.]app

Analysis of official-ex-odus-en.typedream.app indicates a confirmed brand impersonation campaign targeting Exodus wallet users. The domain, registered on February 21, 2026, through Squarespace Domains II LLC, was flagged by 16 of 95 security vendors on VirusTotal and appears on at least one security blocklist, including PhishDestroy. As of July 24, 2026, the domain returns an HTTP 404 status with the page title '404: This page could not be found,' suggesting it may have been taken offline or is in a dormant state.

The SSL certificate is classified as WE1, and infrastructure analysis reveals the use of Node.js, React, Next.js, Google Cloud services (including Cloud Trace and CDN), and Cloudflare for hosting and content delivery. While the exact content of the phishing page is not available for review, the domain name and associated intelligence confirm its intent to impersonate Exodus, a cryptocurrency wallet provider. Defenders should treat this domain as malicious and prioritize blocking it at the network and endpoint levels.

The combination of brand-specific naming, detection by multiple security vendors, and the use of cloud-based hosting infrastructure aligns with known phishing tactics. Although the domain is currently offline, historical DNS and WHOIS records should be preserved for forensic analysis, and monitoring for reactivation or related domains is recommended.