Phishing Analysis: Exodus

Visual Capture

Screenshot of sso-exodus-backup-centre.vercel.app

Detection Info

http://sso-exodus-backup-centre.vercel.app

Detected Brand

Exodus

Country

Unknown

Confidence

100%

HTTP Status

200

Report ID

65145e64-885…

Analyzed

2026-03-30 23:08

Final URL (after redirects)

https://sso-exodus-backup-centre.vercel.app/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T19A1186B69495CA3B00DAE6C48AF6276B37C08380DA430F059BF49B8D8FF6E40CC11185
CONTENT ssdeep	24:hRyTCCqyHUnPbkKbUC+hX3toSc5qqrdBaUC+CHoLm:TyTnCPIAb+hXCSc5qqrjab+ogm

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	dda923a389a92367
VISUAL aHash	f9f8f0d8f8e0c0c0
VISUAL dHash	8100001070000000
VISUAL wHash	f9f8f0f8f8d0c0c0
VISUAL colorHash	00002e00000
VISUAL cropResistant	70ca022000000000,71e8dc9696cce871,86091896dad259a0,8100001070000000

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

📊 Risk Score Breakdown

Total Risk Score

40/100

🔬 Comprehensive Threat Analysis

Threat Type

Exodus Phishing Landing Page

Target

Exodus users

Attack Method

Phishing webpage

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

Exodus

Official Website

N/A

Fake Service

Credential harvesting service

⚔️ Attack Methodology

Primary Method: Malicious Landing Page

Uses Exodus branding to appear legitimate in search results, social media, or advertising networks. Designed to redirect victims to phishing pages or distribute malware while maintaining appearance of authenticity.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.