thegraph[.]blog

thegraph.blog was identified as a phishing domain targeting users by mimicking legitimate brands or services. It received a low VirusTotal score of 3 out of 95, indicating a high likelihood of malicious intent. Such domains are crafted to deceive users into providing sensitive information, often leading to unauthorized access or identity theft.

Registered through HOSTINGER operations, UAB, this domain was relatively new at 152 days old and had been associated with an IP address of 198.18.1.109. The domain appeared on multiple blocklists, suggesting that it had been reported for suspicious activities. This is consistent with its detection status and the potential risks it posed during its operational period.

Currently, the domain is dead, having been taken down by PhishDestroy, which actively reported and monitored its activities. Continuous vigilance is essential as similar threats may arise from newly registered domains attempting to exploit users.