Phishing detection: exodus-wallet.global.ssl.fastly.net

Exodus
http://exodus-wallet.global.ssl.fastly.net/exodus.html Access site
Screenshot
Screenshot of exodus-wallet.global.ssl.fastly.net
Investigate
Domain exodus-wallet.global.ssl.fastly.net0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 146.75.117.194
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://exodus-wallet.global.ssl.fastly.net/exodus.html
urlscan Wayback archive.today
Cert GlobalSign Atlas R3 DV TLS CA 2026 Q2
crt.sh Censys Google CT
Phishunt analysis Beta
42 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.7 Brand in domain label
  • +3.2 Brand favicon
  • +3.0 OpenPhish
  • +3.0 TweetFeed
  • +2.2 Country mismatch
  • +2.0 Young domain
  • +1.2 ASN reputation
  • +1.1 No HSTS header
  • +0.8 Brand + login token
  • +0.7 Bulletproof DNS
  • +0.6 Long domain
  • +0.6 Suspicious TLD
  • +0.5 Deep subdomain
  • +0.1 Hyphens
  • +0.1 External scripts
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates the Exodus cryptocurrency wallet on a Fastly CDN subdomain. The combosquat domain bundles the brand with wallet keywords and serves a page lacking HSTS, consistent with a phishing page designed to steal crypto wallet credentials or recovery phrases.

Brand in domain labelBrand + login tokenOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-29 · confidence 85%
Domain & Network
Whois
Registrar MarkMonitor Inc.
Network
IP 146.75.117.194
Country GermanyGermany
Hosting Fastly, Inc.
ASN AS54113
TLS Cert GlobalSign Atlas R3 DV TLS CA 2026 Q2
External detection OpenPhish TweetFeed
CleanGoogle Safe Browsing · PhishTank · urlscan.io
Report this phishing
Network / ASN Fastly, Inc.
abuse@fastly.com
Registrar MarkMonitor Inc.
abusecomplaints@markmonitor.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-29 01:03 UTC  ·  Last refreshed 2026-08-31 09:30 UTC