grandx[.]pro

Analysis of the domain grandx.pro indicates it was registered on February 21, 2026, through the registrar REGRU-RU. As of July 24, 2026, the domain is offline, though it previously exhibited characteristics consistent with credential phishing activity. Infrastructure analysis reveals the domain was configured with Cloudflare nameservers (lisa.ns.cloudflare.com and alexis.ns.cloudflare.com), a common tactic to obscure hosting origins and evade detection. The page title, matching the domain name itself (grandx.pro), provides no explicit indication of a targeted brand or service, suggesting either a generic phishing attempt or a placeholder prior to full deployment. Detection data is limited but indicative of malicious intent.

The domain was flagged by one security vendor on VirusTotal, though the specific nature of the detection remains unverified. Additionally, it appears on a single security blocklist, further supporting its classification as a potential threat. Gridinsoft assigned a trust score of 0/100, reinforcing the domain's suspicious nature. The domain was also blocked by PhishDestroy, though no additional context regarding the timing or scope of this action is available. No associated IP addresses, hosting providers, or autonomous system numbers (ASNs) are documented in the available intelligence.

The absence of SSL certificate details or HTTP response codes limits further assessment of the domain's operational state prior to takedown. Defenders should treat this domain as a confirmed phishing artifact, particularly given its registration through a registrar historically linked to abusive domains. Organizations are advised to monitor for any residual DNS queries or attempts to re-register the domain under alternative nameservers. If the domain resurfaces, additional scrutiny of its infrastructure and payload delivery mechanisms is warranted.