ScanMalware.com

Security Scan Report: fiat.a.exodus.io

Redirected to:
https://fiat.a.exodus.io/error?exitOnBackClick=true&status=UNSUPPORTED...
Submitted: Jul 21, 2026, 4:59:40 PMCompleted: Jul 21, 2026, 5:00:58 PMpubliccompleted

Summary

This website contacted 1 IP in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is fiat.a.exodus.io and was registered 11 years ago.

Submitted URL: https://fiat.a.exodus.io

Effective URL: https://fiat.a.exodus.io/error?exitOnBackClick=true&status=UNSUPPORTED_LOCATIONRedirected

The Cisco Umbrella rank of the primary domain is #161,326 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 82%

3
Risk Score

The site impersonates the XO Ramp brand on an unrelated, low‑ranked domain with heavily obfuscated JavaScript, indicating a high‑risk phishing attempt.

Risk Factors
Brand impersonation on unrelated domain
Low domain ranking for claimed brand
Critical JavaScript obfuscation
Safety Factors
Domain age >10 years (well‑established)
No forms collecting credentials or payments
No threat‑intel matches or malware detections
Established domain (4124 days old) with no strong malicious indicators — risk clamped from 7 to 5
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Something went wrong | XO Ramp

Scan Type

public

Language

🇺🇸

English

(61% confidence)

Category

technology software

(55%)

Domain Information

The domain 'fiat.a.exodus.io' uses the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'fiat.a'. Its registrable label 'exodus' stretches across 6 characters holding three vowels versus three consonants. Word splitting yields 1 word: exodus. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fiat.a.exodus.io

Page Load Overview

1.95s
Total Load Time
27
HTTP Requests
2
Domains
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:61%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:61%
Script Type:Latin
Text Length:169 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software55% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
55%
cryptocurrency blockchain
52%
real estate property
40%
government public service
38%
adult content
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27104.18.38.189Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
271--

Page Statistics

27
Requests
2
Unique Domains
611.4 KB
Total Size

Detected Technologies2

Cloudflare Bot Management
55%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A8A31009A404E724F5516E1CB23F1E33E94EC3F80A93E1D45458DCA747478BC9BE6AAE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Ij65QAwttGydouKuodnNpa8g2rH5FtTFppjJK990MNukN5K:Ij6AnGydoxBnNpa8g2rH5Ft/K990MNu/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:100755:SBR1QcoAJALGwITBEAt8YCwA5CyceJCYSF4AAgrRCAQKAcRBCAAeKIVCJQMJxICEWIwRFEgZHXAJgoKVUQkErIGIgOAR+Mha

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff181800000018
Perceptual Hash:8ce699b38ccccc33
Difference Hash:f09032b2040c3232
Wavelet Hash:ffffff7d00000018
Color Hash:#862d43

Other Hashes

Crop Resistant:f09032b2040c3232

Scan History

Scan history not available

Unable to load historical scan data