giorex[.]com

PhishDestroy identifies giorex.com as an active tech support scam domain deployed to deceive users into contacting fraudulent call centers under the guise of legitimate technical assistance. The domain mimics branding associated with major software vendors, often luring victims through fake error pop-ups or system alerts that instruct immediate contact with a provided toll-free number. Once engaged, threat actors coerce users into purchasing unnecessary support plans, granting remote access to install malware, or extracting sensitive payment details under false pretenses. This domain represents a critical threat to users expecting authentic vendor support channels, as misdirection through spoofed error messages has become a primary attack vector for credential theft and financial fraud. This domain was flagged by a single security vendor out of 95 on VirusTotal, indicating limited but present detection. giorex.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 172.67.153.175. It utilizes a Let's Encrypt SSL certificate to appear legitimate, though the domain was only created on March 06, 2026—an unusually recent registration that correlates with elevated phishing campaigns targeting tech support users. Given the low detection rate and fresh infrastructure, giorex.com likely operates as a short-lived scam site designed to evade early blocklists while maximizing victim engagement during its operational window. Users who visited giorex.com or interacted with its content should immediately cease any communication with associated phone numbers or forms. Avoid entering personal or payment information, and scan connected devices for unauthorized remote access or malware using a reputable antivirus tool. Report the domain to your browser or security provider and consider changing passwords for accounts exposed through this interaction. If financial data was provided, contact your bank to dispute fraudulent charges and enable transaction monitoring. Remove any browser extensions or software installed during the engagement, as these may contain backdoors or data-stealing components. Stay vigilant for follow-up phishing attempts leveraging your interaction with this scam site.