gramtap[.]us

The domain gramtap.us was registered through Spaceship, Inc. on July 09, 2026 and remains active. DNS resolution points to IP 158.94.211.169 and the domain is served by three dnspod.com name servers (a.dnspod.com, b.dnspod.com, c.dnspod.com). An HTTP request to the host returns a 429 status code, indicating the server is rate‑limiting or throttling connections, a behavior often seen in attempts to hinder automated analysis. The domain was submitted to VirusTotal and scanned by 95 antivirus engines; none reported a detection at the time of analysis, though the lack of detections does not constitute evidence of safety. Internal telemetry has classified the domain as generic_phishing, suggesting it is intended for credential‑harvesting, yet the actual landing page content has not been captured, leaving the precise phishing technique unverified. No additional artifacts such as malware hashes, command‑and‑control addresses, or payloads have been identified. Given the recent creation date, active status, and phishing classification, defenders should block DNS resolution for gramtap.us, monitor outbound traffic for connections to 158.94.211.169, and add the domain to relevant threat‑intel feeds. Ongoing observation is recommended to detect any evolution of malicious content or infrastructure.