grandplays[.]com

The domain grandplays.com was registered on July 20, 2025 through the registrar MAT BAO CORPORATION. DNS resolution points to the IPv4 address 69.5.189.57, which belongs to AS42624 Global-Data System IT Corporation located in Switzerland. No TLS certificate is offered, meaning the site operates without HTTPS. The sole page title retrieved reads "GRANDPLAYS | Play at the best online casino based on Blockchain," consistent with a cryptocurrency gambling lure.

Malware analysis attributes the site to the Gambler Scam phishing kit, and the overall classification is a crypto scam. Reputation scoring is extremely low; Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on one external security blocklist. VirusTotal scans have flagged the domain in three of ninety‑five engines, confirming malicious intent. The domain is currently offline but remains listed by PhishDestroy and other blocklists, indicating the possibility of future re‑activation or use in fast‑flux infrastructure.

Nameserver configuration uses four generic nameservers from nameserverhub.com, a pattern commonly observed in disposable phishing deployments. Defenders should block the authoritative IP 69.5.189.57 and its associated ASN, enforce HTTP‑only blocking given the lack of SSL, and add the domain to internal deny‑list feeds. Continuous monitoring for newly registered domains using the same registrar, similar naming conventions, or the same hosting ASN is recommended to intercept related campaigns. Although the site is offline, sharing this indicator with sink‑hole operators and incorporating it into threat‑intel feeds will reduce exposure for downstream users.