eroseglobalservice[.]com[.]ng

Analysis indicates that the domain eroseglobalservice.com.ng was registered on April 17 2025 through GO54 Limited, formerly Whogohost Limited. The authoritative nameservers dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com resolve the domain to the IPv4 address 163.61.188.222, which belongs to AS153568 NEW DHAKA HARDWARE located in the United States. No TLS certificate is presented, and HTTP requests receive no response because the site is currently taken offline. The page title that was observed when the site was reachable reads “Erose Global Services Ltd – Welcome to Erose Global Services Ltd”, suggesting an attempt to masquerade as a legitimate corporate entity.

The threat classification supplied identifies the campaign as a brand‑impersonation operation targeting the brand “across”, although the landing page content has not been captured for further verification. Detection telemetry shows that the domain appears on a single blocklist, PhishDestroy, and that one of ninety‑five VirusTotal scanners flagged the domain as malicious. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, reinforcing the malicious assessment. The combination of a newly created domain, low‑reputation hosting, absence of encryption, and inclusion on a phishing blocklist points to an active phishing infrastructure that may have been used to harvest credentials or financial information under the guise of a reputable brand.

Defenders should immediately add eroseglobalservice.com.ng and its associated IP address 163.61.188.222 to network deny lists and email filters. Continuous monitoring of the hosting provider lytehosting.com and the registrar GO54 Limited for additional domains that resolve to the same IP range is recommended, as threat actors often reuse infrastructure.