grandpashabet-1giris[.]vip

The domain grandpashabet-1giris.vip is currently identified as a high-risk target for generic phishing based on recent threat intelligence. As of August 03, 2026, the domain is active and has been flagged by 4 out of 91 security vendors on VirusTotal. It is blocked by PhishDestroy and is present on at least one recognized security blocklist.

The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on July 31, 2026, suggesting it is newly created and potentially part of an ongoing campaign. Infrastructure analysis shows the domain uses Cloudflare nameservers (craig.ns.cloudflare.com and edna.ns.cloudflare.com), and resolves to IP address 104.21.24.92, which may be indicative of attempts to obfuscate hosting details or leverage CDN protection. No specific brand or target is associated with this domain in the available evidence, nor is there information regarding its page content or scam type, making the threat generic but significant due to positive detections and active status.

Defenders are advised to closely monitor for activity involving grandpashabet-1giris.vip, implement blocking in network perimeter controls, and update phishing detection engines. Due to its presence on blocklists and security vendor detections, this domain should be treated as a credible phishing threat. Web access and email traffic involving this domain should be restricted or scrutinized until a detailed analysis of its content is available.