powergrown[.]biz

The domain powergrown.biz is currently flagged as an active credential harvesting phishing site. Analysis indicates this domain is designed to deceive users into submitting sensitive login credentials, financial details, or personal information under false pretenses. Despite displaying a generic 'Welcome — Coming Soon' page title, the domain's infrastructure and detection history confirm its malicious intent. No legitimate brand impersonation has been explicitly identified, but the domain exhibits characteristics consistent with generic phishing campaigns targeting a broad range of users. Infrastructure analysis reveals the domain was registered on September 02, 2014, through Name.com, Inc., and currently resolves to the IP address 50.87.224.23, located in the United States under AS46606 (Unified Layer). The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. Detection metrics show the domain is flagged by 19 of 95 security vendors on VirusTotal, appears on 2 security blocklists, and is explicitly blocked by PhishDestroy and PhishingDB. Google Safe Browsing has also classified this domain as phishing, further corroborating its malicious classification. The domain remains active and poses a high risk to users who may encounter it through phishing emails, malicious advertisements, or compromised websites. Organizations and individuals are advised to block this domain at the network level using DNS or firewall rules. Endpoint protection solutions should be updated to include this domain in their blocklists. Users who have interacted with powergrown.biz should immediately change any credentials entered on the site and monitor accounts for unauthorized activity. Security teams are encouraged to investigate logs for connections to 50.87.224.23 or related domains registered through the same registrar, as these may indicate broader compromise or targeted phishing campaigns.