url

http://127.0.0.1:8738

discovered 2026-06-03

Local loopback HTTP listener used to capture wallet credential POSTs (Exodus desktop wallet password + BIP-39 seed mnemonic injected from the browser/app).

Campaigns

Linked packages

Read the full analysis →