grandth[.]com

This domain is flagged as an active credential-harvesting platform designed to impersonate legitimate financial institutions under the guise of Grand Trust Holdings. Analysis indicates the site employs social engineering tactics to deceive users into submitting sensitive financial information, including login credentials, payment details, and personal identification data. The fraudulent page mimics the appearance and branding of a trusted investment firm, increasing the likelihood of successful deception among unsuspecting victims seeking financial services or investment opportunities. Infrastructure analysis reveals the domain grandth.com was registered on September 25, 2023, through NameSilo, LLC, a registrar frequently associated with malicious domains. The site resolves to the IP address 107.173.193.235, hosted on AS36352 (HostPapa) in the United States, and currently lacks SSL encryption, exposing all transmitted data to interception. Detection metrics confirm the domain is flagged by 8 out of 95 security vendors on VirusTotal, with an additional presence on one security blocklist. These indicators collectively demonstrate a high-risk profile consistent with organized phishing operations. Users who have visited grandth.com or interacted with its content are advised to take immediate remedial action. All credentials submitted to the site should be considered compromised and must be changed across all platforms where identical or similar passwords were used. Financial institutions should be notified to monitor for unauthorized transactions, and affected devices should undergo a full security scan to detect potential malware or backdoors. Given the domain's active status and lack of encryption, users are strongly cautioned against further interaction and encouraged to report the site to relevant cybersecurity authorities for takedown procedures.