gramm45[.]biz

This domain, gramm45.biz, is flagged as a generic phishing site designed to harvest user credentials through deceptive login prompts. Analysis of the page title 'Вы не робот?' (translated: 'Are you not a robot?') suggests an attempt to mimic CAPTCHA verification systems, a common tactic in credential phishing campaigns. No specific brand impersonation or drainer kit signatures were identified, though the infrastructure aligns with opportunistic phishing operations targeting Russian-speaking users. Infrastructure analysis reveals the following technical indicators: gramm45.biz resolves to IP address 91.206.71.96 and is proxied through Cloudflare, obscuring direct server attribution. The domain was registered on June 02, 2017, via NiceNIC International Group Co., Limited, indicating longevity despite malicious use. VirusTotal detection metrics show 8/95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, a legitimate provider often exploited to lend false credibility to phishing sites. As of the latest assessment, gramm45.biz has been taken offline, likely due to hosting provider intervention or registrar enforcement. However, residual risk persists due to the domain's age (7+ years) and historical abuse patterns. Organizations should monitor for re-registration attempts or DNS reactivation. Network defenders are advised to block the domain and its associated IP (91.206.71.96) at perimeter controls, while end users should treat any prior interactions with the site as compromised credentials requiring immediate password resets and multi-factor authentication review.