digital-grownt[.]com

This domain is flagged as a high-risk credential harvesting phishing site, designed to deceive users into submitting sensitive login credentials. Analysis indicates the infrastructure is actively targeting individuals through deceptive landing pages, with the site currently displaying a 'Problem loading page' error, a common tactic to evade automated detection while maintaining operational readiness for targeted attacks.

Infrastructure analysis reveals the domain digital-grownt.com is registered through TuringSign Inc. d/b/a Cosmotown and resolves to the IP address 37.49.229.75. The domain appears on one security blocklist and is flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but confirmed malicious activity. The SSL certificate is issued by Let's Encrypt (YR2), a frequently abused certificate authority in phishing campaigns due to its low-cost and automated issuance process. The domain remains active, with no evidence of takedown or remediation efforts.

To mitigate risks associated with this credential harvesting phishing site, organizations should immediately block the domain and its resolving IP address (37.49.229.75) at the network perimeter. Security teams are advised to monitor for any outbound connections to this infrastructure, particularly from endpoints with access to sensitive systems. End-user education should emphasize the risks of credential submission on unverified sites, and multi-factor authentication should be enforced to reduce the impact of stolen credentials. Additionally, domain registrars and hosting providers should be notified to initiate takedown procedures under applicable abuse policies.