gryvant[.]com

This domain is flagged as a high‑risk phishing infrastructure. The domain www.gryvant.com was registered on 2025‑12‑06 through Gname.com Pte. Ltd. and uses the public DNS resolvers a.share-dns.com and b.share-dns.net. DNS resolution points to the IPv4 address 34.107.47.167, which remains active as of the report date. VirusTotal analysis shows a single detection out of 91 scanned security vendors, indicating at least one vendor has identified malicious behavior. Independent blocklist monitoring confirms the domain is listed by PhishDestroy and appears on one additional security blocklist, reinforcing the suspicion of abuse.

No public SSL certificate details, HTTP status codes, page titles, or Safe Browsing verdicts are currently available, so the exact content served by the site cannot be verified. Likewise, there is no observed attribution to known exploit kits, threat actors, or brand‑targeted lures. The limited evidence base therefore leaves the precise phishing campaign details uncertain, but the presence on a dedicated anti‑phishing blocklist and the detection by a security vendor provide sufficient confidence to treat the domain as malicious. Defenders should immediately block DNS resolution for www.gryvant.com at network perimeters and add the address 34.107.47.167 to any IP‑based deny lists.

Monitoring of outbound traffic for attempts to contact the domain or its IP can reveal potential compromised clients. Security information and event management (SIEM) rules should be tuned to alert on any HTTP or HTTPS request to the domain, even if the site returns a benign response. Because the registrar information is public, consider contacting Gname.com Pte. Ltd. to request takedown or suspension. Continuous re‑scanning on VirusTotal or similar services is advised to capture any additional detections that may emerge as the campaign evolves.