# gorgrond.com — MALICIOUS

> gorgrond.com was linked to phishing activity. Users should avoid interacting with this domain and ensure device security remains updated.

## Summary
PhishDestroy identifies gorgrond.com as a low-risk generic phishing domain. The domain was used in deceptive campaigns aimed at harvesting sensitive user information. Although the threat level is assessed as low, users are advised to remain vigilant and avoid engaging with suspicious emails or websites associated with this domain.

Technical analysis shows gorgrond.com resolved to IP address 172.67.152.150 and was registered on March 4, 2026, via NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal flagged the domain with limited detections, suggesting minimal but notable malicious activity. The domain infrastructure leveraged standard hosting services, likely to evade early detection and prolong phishing operations.

Currently, gorgrond.com is offline, indicating the takedown or suspension of the domain to mitigate ongoing risks. Users should continue to exercise caution with similar domains and maintain updated security solutions. Organizations are encouraged to monitor for any related phishing attempts and educate users on recognizing phishing indicators to prevent compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 666)
- Page title: Gorgrond: Elon Musk’s Official Crypto Casino Powered by Blockchain

## Domain Intelligence
- Registered: 2026-03-04 17:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.152.150
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: journey.ns.cloudflare.com rayden.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 9 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/nsctg2T1/a6e493a4ee20.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/gorgrond.com
- PhishDestroy: https://phishdestroy.io/domain/gorgrond.com/
- LLM endpoint: https://phishdestroy.io/domain/gorgrond.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gorgrond.com/
Last updated: 2026-03-19