[SCAM] Exodus wallet phishing

[dkbit98]

What happened: One more Exodus wallet phishing attempt with scammers sending emails telling people that their Exodus wallet had security breach and posting link to update wallet, redirecting to fake website asking for your seed words.

Website:

Code:

https://www.exodus-wallet.support/

Archive: https://archive.vn/GX7MU

Domain Name: exodus-wallet.support
Registry Domain ID: a04117ce36394206ada7d81613822cdc-DONUTS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://www.namecheap.com/
Updated Date: 2021-01-25T02:29:36Z
Creation Date: 2021-01-25T02:26:37Z
Registry Expiry Date: 2022-01-25T02:26:37Z
Registrar: NameCheap, Inc.

NEVER enter your seed words anywhere online!

[1715014765]

1715014765

[1715014765]

1715014765

[1715014765]

1715014765

[TalkStar]

I don’t know from where they are getting crypto based user database and sending emails to attract people on their money stealing trap. We have seen similar attempt in the past and still this scammers are running their phishing platform to steal exodus wallet users credentials and fund. This time they are using a new created domain.

You have done a great job by detecting this phishing website and their activities. You can notify exodus authority about this by sharing your topic link which will help them to warn their platform's current user.

[Rikafip]

I don’t know from where they are getting crypto based user database and sending emails to attract people on their money stealing trap. We have seen similar attempt in the past and still this scammers are running their phishing platform to steal exodus wallet users credentials and fund. This time they are using a new created domain.

It might be that they are using using leaked Ledger email database and hoping that some of them are also using Exodus. My email got leaked and I got shit load of phishing attempts from various fake sites.

Seems like phishing website is already down, and for some reason archive link is not working.

[dkbit98]

...

There are one million email addresses just from many ledger wallet leaks, not to mention all other exchange hacks.
Best thing we can do for protection is using multiple email addresses or aliases for those providers supporting them, and warn newbies about this scam tactics.

[TalkStar]

It might be that they are using using leaked Ledger email database and hoping that some of them are also using Exodus. My email got leaked and I got shit load of phishing attempts from various fake sites.

Seems like phishing website is already down, and for some reason archive link is not working.

Its not like that they have got all emails from Ledger database but yeah i agree with you that this tyoe of scammers will obviously take the advantage of using ledgers leaked database. Same like you many of us are getting continuous fake emails from unknown sources and we can't say exactly from where they have collected our emails. In current situation anyone can easily purchase millions of emails from dishonest platform owners and they don't care to share their users informations to third party.

Ignoring emails from unknown sources is the only way by which we can keep us safer from this kinda phishing emails. I hope newbies will be aware about it and they will be careful enough.

[JollyGood]

Sadly the scammers will always find a way to keep their scams going. Most of the scams using similar domain names should be easily spotted by people before they start entering private information either on the web pages or on malware infected programs.

[btc_angela]

Yeah, the database could come from the leaked Ledger database. And we all know that this scammers do collude with each other and probably sharing many databases to each other's regardless if crypto related or not to make one email blast.

Exodus wallet is one of the prime targets, together with Electrum so everyone used our common sense here.

[zanezane]

I don’t know from where they are getting crypto based user database and sending emails to attract people on their money stealing trap. We have seen similar attempt in the past and still this scammers are running their phishing platform to steal exodus wallet users credentials and fund. This time they are using a new created domain.

You have done a great job by detecting this phishing website and their activities. You can notify exodus authority about this by sharing your topic link which will help them to warn their platform's current user.

There are a lot of people that are selling data on the Internet, you just need to pay the price. The only thing that I believe that can help mitigate this kind of phishing attempt is to regularly check your email if it has already been breached or is stolen because a site it is used on has been attacked and data leaks happen. The site that I use to regularly check my email is haveibeenpwned.com. There are a lot of phishing sites out there, this is a good job done but with every 1 being exposed another 5 pop up but that does not mean that we are not fighting the good fight, they will eventually lose word combinations to use for their phishing websites.

[Vaculin]

I'm glad I'm not checking my email actively, all the updates I do is definitely coming from the prompt of the wallet I'm using.
Scammers will always scam, they will never get tired so we just have to be careful.

Kudos to OP for sharing this valuable information, it's very helpful to newbies to be aware of this kind of scam.

phishing is very popular kind of scam attempt in the crypto space.

[Raflesia]

I'm glad I'm not checking my email actively, all the updates I do is definitely coming from the prompt of the wallet I'm using.
Scammers will always scam, they will never get tired so we just have to be careful.

Kudos to OP for sharing this valuable information, it's very helpful to newbies to be aware of this kind of scam.

phishing is very popular kind of scam attempt in the crypto space.

If there is a suspicious email notification, then we need to be careful too because scamers come with beautiful words, therefore I never click on anything that is sent to an email without my notification so this is clearly the fraudulent attempt they are doing is spread via email and of course a newbie will be surprised to see this i am afraid they give the seed phrase in the excodus wallet on his phishing site.

Don't be surprised that phishing sites have long been popular among us, but still some are trapped in this phishing, so as much as possible we tell those who don't know the example the OP has published, of course this is very useful for all of you.