Security Scan: Exodus Wallet

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0694ffe6-df1d-42c7-9afe-d359ea479d2f Domain and IP registration (RDAP)/api/v1/rdap/0694ffe6-df1d-42c7-9afe-d359ea479d2fHow often this domain was scanned/api/v1/domain/stats/phantomwalletlarper.netlify.app Scan history for this domain/api/v1/domain/history/phantomwalletlarper.netlify.app?limit=15

This website contacted 10 IPs in 2 countries across 6 domains to perform 14 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://phantomwalletlarper.netlify.app/

AI Security Verdict

Moderate Risk

Confidence: 78%

Risk Score

Free netlify.app page posing as the 'Exodus Wallet' brand ('phantomwalletlarper') with a fake crypto dashboard. No credential or payment form detected, but it is clear brand impersonation on a non-official, unranked host — do not enter funds or data.

Risk Factors (4)

Impersonates the Exodus Wallet brand on a domain that is not Exodus' official domain

Hosted on a free instant netlify.app subdomain with unknown create date and no reputation (unranked in Cisco Umbrella)

Hostname 'phantomwalletlarper' indicates a deliberate fake/impersonation, and names a second wallet brand (Phantom)

Displays a counterfeit crypto-wallet dashboard with a falsified balance and send/receive controls

Safety Factors (6)

No forms detected (0 total, 0 password, 0 disguised password, 0 payment fields)

No Indicators of Compromise matches

No JavaScript malware (hunting rule) patterns or native-hunting rule high-precision hits

No network IDS alerts and no cross-origin credential exfiltration

Third-party scripts are from ranked, common CDN/text/font hosts

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 5

Domain age information unavailable

Details

Page Title

Exodus Wallet

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Domain 'phantomwalletlarper.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'phantomwalletlarper'. The registrable portion 'netlify' spans 7 characters containing two vowels alongside 5 consonants. Splitting it apart reveals 3 words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

@ Kerem v g $30,793.13 + +$4,127.35 (3.36%) a 3 2 sera Receive Excharge Buy arn upto 8.2% APY s Sarton fee S2L. Value 24h Ss © _Bitcoin ere $15,890.10 ou SALTS 44.12% rT Be Solana seu $6,945.5...

Page Load Overview

1.19s

Total Load Time

707 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,164 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain44% confidence

Type: static

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

44%

cryptocurrency

30%

finance banking

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	104.26.2.143Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.127.95Google · CDN	United States	AS15169Google LLC
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.110.94Google · CDN	United States	AS15169Google LLC
1	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.68.11Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	10	-	-