europe-north[.]grtainewsone[.]info

The domain europe-north.grtainewsone.info is currently active and classified as a generic phishing infrastructure. VirusTotal reports that 1 of 91 security vendors has flagged the domain, indicating at least one detection but providing limited consensus. DNS resolution points to the IP address 104.21.61.61; no authoritative nameserver records are available (NS_NOT_FOUND). The combination of a single vendor flag, a public‑facing IP, and the high‑risk rating suggests the domain is being used for credential‑stealing or credential‑harvesting activities, even though the exact payload or target brand has not been disclosed. Uncertainty remains regarding the scale of the campaign, the hosting provider’s involvement, and any additional command‑and‑control endpoints that may be associated with the same IP. Defenders should immediately block traffic to and from europe-north.grtainewsone.info at perimeter firewalls and DNS resolvers, add the IP 104.21.61.61 to blacklists, and monitor outbound connections for similar resolution patterns. Continuous re‑evaluation of threat intelligence feeds for new detections is advised, as additional security vendors may flag the domain over time.