xn--exodusguid-k7a[.]com

Analysis indicates that the domain xn--exodusguid-k7a.com was registered on July 06, 2026 through Hostinger Operations, UAB and is currently active. The domain resolves to IP address 77.37.37.17 and is served by the horizon.dns-parking.com and orbit.dns-parking.com name servers. No SSL certificate is presented for the domain, leaving traffic unencrypted. The domain is flagged in the AlienVault OTX repository, appearing in one threat‑intelligence pulse that associates it with brand‑impersonation activity targeting Exodus. VirusTotal records show that two of ninety‑one security vendors have flagged the domain, reinforcing the suspicion of malicious use. The available intelligence does not include a detailed payload or landing‑page description, leaving the exact phishing vector unverified. Given the high‑risk rating, defenders should block the domain at network perimeters, add the associated IP to deny lists, and monitor for any future resolution changes. Continuous observation of the hosting registrar and name‑server infrastructure is recommended to detect potential re‑hosting or domain‑generation tactics.