aez[.]exalot[.]cc

Analysis of aez.exalot.cc shows a newly registered domain (creation date 20 March 2026) that has been flagged as a generic phishing site. Ten of ninety‑four security scanners on VirusTotal raise detections, indicating that multiple independent engines have identified malicious behavior. The domain resolves to IP address 217.60.36.24, which is geolocated to France and is hosted by CGI GLOBAL LIMITED. The hosting IP appears on a single security blocklist and is currently listed as offline, suggesting the infrastructure has been taken down or is no longer serving content.

DNS resolution is provided by the authoritative nameservers a.dnspod.com and c.dnspod.com, both operated by DNSPod. The registrar listed is NICENIC INTERNATIONAL GROUP CO., LIMITED, a known bulk registration service. An SSL certificate issued by Let’s Encrypt (R13) is present, confirming that transport encryption is active but offering no assurance of legitimacy. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the classification as malicious.

The domain is also blocked by the PhishDestroy blocklist. No page title, content, or additional web‑application indicators are available, leaving the exact phishing vector undefined. Defenders should add aez.exalot.cc to URL filtering and DNS blocklists, monitor the associated IP 217.60.36.24 for any residual activity, and consider extending blocklist coverage to the observed nameservers. Continuous re‑evaluation is advised in case the domain is re‑hosted or the IP is repurposed for other threats.