exponentialstock[.]com

The domain exponentialstock.com was registered on 27 Oct 2025 through the registrar TuringSign Inc. d/b/a Cosmotown. Current DNS records show four authoritative name servers: ns111.asurahosting.com, ns111.my-control-panel.com, ns112.asurahosting.com, and ns112.m. All resolve to the IPv4 address 198.251.89.229, which is the sole hosting endpoint observed for the domain. The domain is listed as active in the internal threat feed and is classified as a generic phishing site.

It appears on one external blocklist; the list is maintained by PhishDestroy, which has already blocked the domain for malicious activity. A VirusTotal scan performed by 91 vendor engines returned no detections at the time of analysis, but the absence of a detection does not constitute a safety guarantee. No additional indicators such as SSL certificate details, HTTP response codes, or page content have been published, leaving the exact phishing payload and targeted brand unknown. The limited publicly available data suggest that the infrastructure is modest, relying on a single IP address and a set of name servers that appear to be shared with other hosting customers.

Defenders should continue to monitor the domain for changes in resolution, add the IP address 198.251.89.229 to network‑level blocklists, and enforce existing phishing‑blocking controls such as the PhishDestroy list. Organizations that employ email or web filtering should ensure that any URLs referencing exponentialstock.com are treated as malicious, and incident response teams should be prepared to investigate any credential‑theft attempts that may originate from this domain. Ongoing collection of HTTP traffic, TLS handshake data, and content snapshots is recommended to refine the threat profile as more evidence becomes available.