lu-grantie[.]info

This domain, lu-grantie.info, is flagged for brand impersonation targeting Facebook, specifically designed to harvest user credentials through a deceptive interface. Analysis of the page title, lumie-granite Bank, suggests an attempt to mimic financial or login portals associated with the targeted brand, leveraging social engineering tactics to deceive users into submitting sensitive information. The domain exhibits characteristics typical of credential phishing campaigns, including the use of misleading branding and urgent prompts to lower user vigilance.

Technical indicators reveal lu-grantie.info was registered through an entity associated with ASN 153568 and currently resolves to the IP address 163.61.188.89. The domain is detected by 10 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus regarding its malicious nature. It appears on a single security blocklist, and its Gridinsoft trust score is 0/100, further corroborating its classification as a high-risk asset. Detected technologies include PHP, YouTube embeds, Bootstrap, LiteSpeed, OWL Carousel, jQuery, Popper, and HTTP/3, which may be employed to enhance the site's legitimacy or evade detection.

As of the latest assessment, lu-grantie.info has been taken offline, likely due to mitigation efforts by hosting providers or security teams. However, residual risk persists, as threat actors may re-deploy the infrastructure under a new domain or IP address. Users who interacted with the site should immediately reset credentials for any accounts accessed during the exposure window. Organizations are advised to monitor for similar domains registered under the same ASN or resolving to the same IP range, as these may indicate follow-up campaigns. Proactive measures, such as blocking the IP 163.61.188.89 and implementing domain-based filtering, are recommended to prevent future exposure.