# PhishDestroy domain threat record: grindworks.co.nz

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/grindworks.co.nz/
Machine-readable companion: https://phishdestroy.io/domain/grindworks.co.nz/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-27 23:38:57 UTC
- Stored record updated: 2026-10-28 00:04:10 UTC
- VirusTotal detections in the stored snapshot: 6/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 210.5.50.149
- Registrar in stored WHOIS data: 1st Domains Limited
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2021-08-08 00:45:17 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019d0f0b-fe10-71bd-b4e8-2398e93d0084/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/grindworks.co.nz
- Certificate Transparency search: https://crt.sh/?q=%25.grindworks.co.nz
- Web Archive lookup: https://web.archive.org/web/*/https://grindworks.co.nz/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s internal blocklist marks grindworks.co.nz as a suspicious domain. The intake was accepted on 2026-10-28 under a trusted‑auto rule. The recorded page title is “GRIND WORKS | TAUPO” and an HTTP 200 response was observed on that date.

How the scam works
The listing reflects a generic phishing risk indicated by multiple security vendors; such sites typically imitate legitimate brands to harvest credentials or personal data. No specific malicious behavior was observed on the page beyond the title, so the exact mechanism remains undetermined.

Evidence
VirusTotal reported six malicious detections out of 92 engines on 2026-10-28, with vendors labeling the domain as phishing or malicious. Google Safe Browsing checked on 2026-10-28 did not flag the site, while urlscan’s engine flagged it as malicious but its overall verdict was clean on 2026-03-21. OTX listed two pulses referencing the domain on 2026-10-28, and PhishDestroy’s internal blocklist includes it as of 2026-10-27; external blocklists showed no entries.

Infrastructure
The recorded IP was 210.5.50.149, hosted by Voyager Internet Ltd. in New Zealand, and the domain used nameservers ns1.1stdomains.net.nz, ns2.1stdomains.net.nz with an MX record mta.1stdomains.net.nz. The domain is 921 days old, uses a Let’s Encrypt TLS certificate issued on 2026-09-15 and valid until 2026-12-14, and open ports observed were 21, 80 and 443. DNSSEC was not enabled.

What to do
Visitors should avoid entering any credentials or personal information on the site and change passwords if they suspect they have been submitted. Defenders should add grindworks.co.nz to blocklists, monitor network logs for connections to 210.5.50.149, and review any email traffic from its MX host.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019d0f0b-fe10-71bd-b4e8-2398e93d0084/
Cloudflare Radar report: https://radar.cloudflare.com/scan/5b0d09a1-cbc5-4d31-babb-d6b5d01f80a8
Stored capture screenshot: https://urlscan.io/screenshots/019d0f0b-fe10-71bd-b4e8-2398e93d0084.png
Cloudflare Radar screenshot (2026-10-27T23:41:57Z): https://screenshots.phishdestroy.io/cf/5b0d09a1-cbc5-4d31-babb-d6b5d01f80a8.png
URLScan screenshot (2025-11-26T21:18:04Z): https://screenshots.phishdestroy.io/us/019ac207-bb5c-7777-a41f-fa7b254f23da.png
URLScan capture report: https://urlscan.io/result/019ac207-bb5c-7777-a41f-fa7b254f23da/
VirusTotal report: https://www.virustotal.com/gui/domain/grindworks.co.nz
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=grindworks.co.nz
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 23:44:24 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019d0f0b-fe10-71bd-b4e8-2398e93d0084.png
  Captured: 2026-10-27 23:38:57 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/019d0f0b-fe10-71bd-b4e8-2398e93d0084.png
  Source report: https://urlscan.io/result/019d0f0b-fe10-71bd-b4e8-2398e93d0084/
- URLScan · 2025-11-26: https://screenshots.phishdestroy.io/us/019ac207-bb5c-7777-a41f-fa7b254f23da.png
  Captured: 2025-11-26 21:18:04 UTC
  Source report: https://urlscan.io/result/019ac207-bb5c-7777-a41f-fa7b254f23da/
  SHA-256: 63badf170a34795118d57cb758ee1ba13590d871806b12b92738286fbc75225e
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/5b0d09a1-cbc5-4d31-babb-d6b5d01f80a8.png
  Captured: 2026-10-27 23:41:57 UTC
  Source report: https://radar.cloudflare.com/scan/5b0d09a1-cbc5-4d31-babb-d6b5d01f80a8
  SHA-256: 1aee295f5b7af44591f9e15c94c416700bd8b07d9faa85b08f35b12cc805f52c

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T23:43:29Z",
        "uuid": "019d0f0b-fe10-71bd-b4e8-2398e93d0084",
        "scanned_at": "2026-03-21T06:19:05Z",
        "final_url": "https://grindworks.co.nz/",
        "status": 200,
        "ip": "210.5.50.149",
        "ptr": "plesk-lnx16.1stdomains.net.nz",
        "domains": [
            "fonts.gstatic.com",
            "fonts.googleapis.com",
            "www.google-analytics.com",
            "www.googletagmanager.com"
        ],
        "ips": [
            "2001:4860:4802:34::178",
            "142.250.195.227",
            "2404:6800:4006:803::2008",
            "2404:6800:4006:803::200a",
            "210.5.50.149"
        ],
        "asns": [
            "15169",
            "56030"
        ],
        "countries": [
            "US",
            "AU",
            "NZ"
        ],
        "link_domains": [
            "dotinfomarketing.co.nz",
            "www.taupo.info"
        ],
        "doc_hash": "d075f00052615b34fd07be72297ea16eafcaab11da7f1a375cdd73ebfca8f745",
        "script_hashes": [
            "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
            "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
            "ad97778077e648e9c0adbd33005dd7d89fc0313a9b6caef7bf29ed253af8a312",
            "22a7ae46aefb3325e3e2761085d7b2ea2cda8dc351cf391a62918bb09784f693",
            "b6205029e1016596807b655c8f57818736a787e32ceb1407effa152ac3bb9380",
            "1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea"
        ],
        "globals": [
            "jQuery",
            "$",
            "et_link_options_data",
            "gtag",
            "dataLayer",
            "DIVI",
            "et_builder_utils_params",
            "et_frontend_scripts",
            "et_pb_custom",
            "et_pb_box_shadow_elements",
            "Waypoint",
            "et_pb_debounce",
            "et_pb_smooth_scroll",
            "et_pb_form_placeholders_init",
            "et_duplicate_menu",
            "et_pb_remove_placeholder_text",
            "et_fix_fullscreen_section",
            "et_bar_counters_init",
            "et_fix_pricing_currency_position",
            "et_pb_set_responsive_grid",
            "et_pb_set_tabs_height",
            "et_pb_box_shadow_apply_overlay",
            "et_pb_init_nav_menu",
            "et_pb_toggle_nav_menu",
            "et_pb_apply_sticky_image_effect",
            "et_pb_menu_inject_inline_centered_logo",
            "et_pb_menu_inject_item",
            "et_pb_reposition_menu_module_dropdowns",
            "et_load_event_fired",
            "et_is_fixed_nav",
            "et_pb_init_woo_star_rating",
            "et_pb_wrap_woo_attribute_fields_in_span",
            "et_calculate_fullscreen_section_size",
            "et_pb_init_modules",
            "etFixDividerSpacing",
            "etInitWooReviewsRatingStars",
            "salvattore",
            "et_calculate_header_values",
            "et_change_primary_nav_position",
            "et_fix_page_container_position"
        ],
        "cookies": [
            "_ga_PK8FX5PKQH",
            "_ga"
        ],
        "tls": {
            "san": [
                "grindworks.co.nz",
                "www.grindworks.co.nz"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "R12",
            "subject": "grindworks.co.nz",
            "protocol": "TLS 1.3",
            "valid_to": "2026-06-17T20:19:18Z",
            "valid_from": "2026-03-19T20:19:19Z"
        },
        "domain_age_days": 921,
        "apex_age_days": 921,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 32,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 0,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html; charset=UTF-8",
            "x-powered-by": "PHP/8.3.21\nPleskLin"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T23:43:31Z",
        "uuid": "5b0d09a1-cbc5-4d31-babb-d6b5d01f80a8",
        "scanned_at": "2026-10-27T23:41:57Z",
        "final_url": "https://grindworks.co.nz/",
        "status": 200,
        "history": [
            {
                "url": "https://grindworks.co.nz/",
                "status": 200
            }
        ],
        "dom_hash": "3f34c2904a1c2494b5b3961c4ca415704c11b5935e94ea3588fa73e78f114cbe",
        "doc_hash": "619d529c58bf1639d65e811b40fcd75ae6e17f1dea62e8236b8f97ae317b93ae",
        "domain_risks": [
            "Business",
            "Business & Economy",
            "Home & Garden",
            "Society & Lifestyle"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "grindworks.co.nz",
                "type": "A",
                "value": "210.5.50.149"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.26",
        "whois": {
            "registrar": "1st Domains Limited",
            "created": "2021-08-08T02:45:17Z",
            "updated": "2026-08-11T22:57:03Z",
            "nameservers": [
                "ns1.1stdomains.net.nz",
                "ns2.1stdomains.net.nz"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T23:40:55Z",
        "analysis_at": "2026-10-02T11:07:41Z",
        "stats": {
            "timeout": 0,
            "harmless": 52,
            "malicious": 6,
            "suspicious": 0,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "VIPRE": "phishing",
            "Sophos": "phishing",
            "Gridinsoft": "phishing",
            "ADMINUSLabs": "malicious",
            "alphaMountain.ai": "phishing"
        },
        "reputation": 0,
        "registrar": "1st Domains Limited",
        "created": "2021-08-08T02:45:17Z",
        "updated": "2026-08-11T22:57:03Z",
        "first_seen": "2024-06-15T10:10:35Z",
        "dns": [
            {
                "ttl": 3600,
                "type": "SOA",
                "rname": "hostmaster.1stdomains.net.nz",
                "value": "ns1.1stdomains.net.nz"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns2.1stdomains.net.nz"
            },
            {
                "ttl": 3600,
                "type": "NS",
                "value": "ns1.1stdomains.net.nz"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=kjX51sQqg2Kva4Wa57F3eVlpT3fo-UC9PnWGxSAcAe4"
            },
            {
                "ttl": 3600,
                "type": "MX",
                "value": "mta.1stdomains.net.nz",
                "priority": 10
            },
            {
                "ttl": 3600,
                "type": "A",
                "value": "210.5.50.149"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "v=spf1 include:_spf.1stdomains.co.nz ~all"
            }
        ],
        "dns_at": "2026-10-09T00:40:31Z",
        "jarm": "29d29d00029d29d00042d42d00000000f78d2dc0ce6e5bbc5b8149a4872356",
        "cert": {
            "san": [
                "grindworks.co.nz",
                "www.grindworks.co.nz"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "5931638a4739d071b03b4bae4c6a1530233",
            "sha256": "21513d2e9c0e2d8df0198cb93e80863738abfdeed28650699f297f2c6f094065",
            "subject": "grindworks.co.nz",
            "valid_to": "2026-12-14T20:18:31Z",
            "valid_from": "2026-09-15T20:18:32Z"
        },
        "whois": {
            "registrar": "1st Domains Limited",
            "registrar_url": "www.1stdomains.nz",
            "created": "2021-08-08T02:45:17Z",
            "updated": "2026-08-11T22:57:03Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "ns1.1stdomains.net.nz",
                "ns2.1stdomains.net.nz"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T23:44:05Z",
        "mail_config": {
            "mx": [
                "mta.1stdomains.net.nz"
            ],
            "spf": "v=spf1 include:_spf.1stdomains.co.nz ~all",
            "dmarc": true,
            "spf_lookups": 3
        },
        "caa_records": {
            "domain": "grindworks.co.nz"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-27T23:42:50Z",
            "first": "2021-12-05T04:57:54Z",
            "changes": 5,
            "days_archived": 6,
            "scans_per_day": 0,
            "avg_page_bytes": 10707
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://grindworks.co.nz/sitemap_index.xml"
            ]
        },
        "social_tags": {
            "ogUrl": "https://grindworks.co.nz/",
            "title": "GRIND WORKS | TAUPO",
            "ogType": "website",
            "robots": "index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1",
            "ogTitle": "GRIND WORKS | TAUPO",
            "generator": "Divi v.4.27.4",
            "ogSiteName": "Grind Works",
            "twitterCard": "summary_large_image",
            "canonicalUrl": "https://grindworks.co.nz/"
        },
        "mixed_content": {
            "no_sri": [
                "https://www.googletagmanager.com/gtag/js"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 197,
                "tls": 322,
                "wait": 17865,
                "connect": 299,
                "download": 871
            },
            "response_ms": 19554
        },
        "tls_connection": {
            "alpn": "http/1.1",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                80,
                443
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.26.245",
                    "host": "ns1.1stdomains.net.nz"
                },
                {
                    "ip": "162.159.27.184",
                    "host": "ns2.1stdomains.net.nz"
                }
            ],
            "zone": "grindworks.co.nz"
        },
        "location": {
            "ip": "210.5.50.149",
            "asn": "56030",
            "org": "Voyager Internet Ltd.",
            "city": "Auckland",
            "country": "NZ"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "grindworks.co.nz"
        },
        "dns": {
            "A": [
                "210.5.50.149"
            ],
            "MX": [
                "{\"exchange\": \"mta.1stdomains.net.nz\", \"priority\": 10}"
            ],
            "NS": [
                "ns1.1stdomains.net.nz",
                "ns2.1stdomains.net.nz"
            ],
            "SOA": "{\"nsname\": \"ns1.1stdomains.net.nz\", \"hostmaster\": \"hostmaster.1stdomains.net.nz\", \"serial\": 2025042201, \"refresh\": 86400, \"retry\": 900, \"expire\": 604800, \"minttl\": 3600}",
            "TXT": [
                "google-site-verification=kjX51sQqg2Kva4Wa57F3eVlpT3fo-UC9PnWGxSAcAe4",
                "v=spf1 include:_spf.1stdomains.co.nz ~all"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "get_ip": {
            "ip": "210.5.50.149",
            "family": 4
        },
        "linked_pages": {
            "external": [
                "https://dotinfomarketing.co.nz/",
                "https://www.taupo.info/"
            ],
            "external_count": 2,
            "internal_count": 17
        },
        "whois": {
            "registrar": "1st Domains Limited",
            "created": "2021-08-08T02:45:17Z",
            "updated": "2026-08-11T22:57:03Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.1stdomains.net.nz",
                "ns2.1stdomains.net.nz"
            ]
        }
    }
}
```