What happened
The phishing-tracking service PhishDestroy flagged en-exodus.apper.so as phishing today. Its report says the page uses the title "Exodus Wallet | Secure Desktop Crypto Wallet for Windows & Mac" and on November 11, 2026 showed an 'exodus.'-branded landing page with 'Start Free' and 'See a Demo' buttons. PhishDestroy rates it Critical (95/100) and records that 8 of 92 VirusTotal engines flagged it (7 malicious, 1 suspicious), that the MetaMask and SEAL blocklists list it, and that a urlscan capture marked it malicious. Exodus is the impersonated wallet brand, not the operator, and apper.so is a site-building platform hosting the subdomain. Do not download software or enter a wallet recovery phrase on this page.
How the scam works
Wallet and exchange phishing pages often follow an email, comment or advert that says you must confirm your account, update an app or claim a token credit. The page may ask for a recovery phrase, a private key or a password. Official wallet apps and hardware devices never need those words to be typed into a website. Close the page, open only the official app or a bookmark you already use, and if you entered a phrase treat the wallet as compromised and move funds to a new wallet whose phrase you created offline, if you still can.
en-exodus.apper.so is a subdomain on the apper.so site builder, not the official Exodus wallet. Exodus was impersonated and is not involved. PhishDestroy, MetaMask and SEAL blocklists were cited as having flagged the page; VirusTotal support was listed as 8 of 92 engines and PhishDestroy scored it 95/100. Other wallet lures flagged the same day include a Trust Wallet look-alike domain, a fake Magic Eden page and a fake Ledger Live download.
Source
Public post on Mastodon, 11 November 2026: https://mastodon.social/@phishdestroy/117599428644184507
The indicators come from this source and have not been independently checked by scammers.com.
