exon-energy[.]com

The domain exon-energy.com is assessed as a generic phishing infrastructure endpoint associated with fake login-style impersonation activity. The observed page title "Exon-energy COMPANY" suggests an attempt to present a corporate identity, likely intended to increase trust and induce credential submission or user interaction on a fraudulent interface.

Technical intelligence indicates multiple risk signals across external scanners and reputation systems. VirusTotal reports 7/95 security vendors flagging the domain as malicious. The domain is registered through OwnRegistrar, Inc., and resolves to IP address 163.61.188.5. The domain was created on May 20, 2024. It is currently associated with a Let’s Encrypt SSL certificate and operates on a stack including WordPress, MySQL, PHP, LiteSpeed, Smartsupp, jQuery, Font Awesome, and HTTP/3. The domain appears on 1 security blocklist, and exhibits a Gridinsoft trust score of 0/100.

At present, exon-energy.com is confirmed to be taken offline, reducing immediate exposure risk; however, historical infrastructure indicators suggest prior phishing deployment. The combination of low trust scoring, partial vendor detections, and recent domain age indicates elevated residual risk if the infrastructure is reactivated or mirrored. Defensive action should include continued monitoring of the IP 163.61.188.5, tracking certificate reissuance patterns, and watching for domain re-registration or cloned deployments under similar branding patterns.