s-w-pro[.]com

The domain s-w-pro.com was registered on 23 April 2026 through TuringSign Inc. d/b/a Cosmotown. It resolves to the IPv4 address 51.89.41.140, which is hosted by OVH GmbH in Germany. HTTP requests return a 200 OK status and the page title is reported as “online digital platform”, a common lure used in credential‑harvesting campaigns.

The site presents a valid Let's Encrypt TLS certificate issued in the current year, indicating recent deployment of HTTPS. DNS analysis shows a single MX record pointing to s-w-pro.com with priority 0, suggesting the domain is also used for inbound mail handling. The IP address geolocates to Germany, confirming the OVH data center location. Reputation services assign a Gridinsoft trust score of 0/100 and only one security blocklist currently lists the domain, while PhishDestroy has already flagged it as malicious.

VirusTotal scans report that 2 of 95 security vendors flag the domain, a low detection rate that may reflect limited exposure or evasion techniques. Nevertheless, the combination of a high‑risk classification, active status, and the presence of a generic phishing landing page warrants a high confidence assessment that the infrastructure is being leveraged for credential‑stealing operations targeting users who are enticed by the “online digital platform” narrative.

Defenders should add s-w-pro.com and its resolving IP 51.89.41.140 to network blocklists, enforce TLS inspection to capture any credential submissions, and monitor mail traffic for messages originating from the domain’s MX host. If possible, sinkholing the domain or redirecting traffic to a safe landing page can further mitigate user exposure. Continuous re‑evaluation is advised, as the low vendor detection count may change rapidly if the campaign expands.