erowex[.]com

PhishDestroy identifies erowex.com as an active credential harvesting scam under investigation for phishing. The domain was registered on December 16, 2025, and resolved to IP 188.114.97.3 through MAT BAO CORPORATION. VirusTotal shows 10/95 detections, and it appears on 1 security blocklist, including OISD. This domain was flagged by OISD and utilizes a Google Trust Services SSL certificate to appear legitimate. No antivirus engines on VirusTotal detect malicious activity, which suggests this threat is either newly deployed or employs evasive tactics. The domain’s recent creation date (December 16, 2025) and hosting on IP 188.114.97.3, which has no prior reputation for malicious activity, indicate a targeted, short-lived campaign designed to evade detection. The use of MAT BAO CORPORATION as the registrar further complicates traceability, as this registrar has been associated with disposable domains used in phishing lures. Users must avoid interacting with erowex.com entirely. If credentials or sensitive data were entered, immediately change passwords and enable multi-factor authentication on all affected accounts. Block the domain at the network level and report the site to your security team. ISPs and security vendors should flag 188.114.97.3 and the domain’s SSL certificate for takedown. This threat exploits trust in HTTPS and domain legitimacy—remain vigilant and rely on verified sources for any web-based transactions or logins.