grimvaris[.]ecostrems[.]pro

A heightened risk level has been assigned to the domain grimvaris.ecostrems.pro, which was identified as a brand impersonation phishing site specifically targeting Google users. This type of threat typically involves deceptive login pages designed to capture credentials, often leading to account takeover or further financial fraud. The domain is now offline, but its past activity poses a continued risk to users who may have encountered it.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged the domain with 9 out of 95 security vendors marking it as malicious. The domain was created on February 21, 2026, resolving to IP address 192.3.141.252, and it appears on one security blocklist. It holds an SSL certificate from R10, which may lend it a false sense of legitimacy. The page title observed was "Grimvaris :-: Home" and it impersonated the Google brand, a common tactic to harvest sensitive data.

Users who may have interacted with grimvaris.ecostrems.pro should immediately change passwords for any accounts entered on the site, enable two-factor authentication, and monitor for unauthorized activity. Avoid clicking links in unsolicited messages; always type the official URL directly. PhishDestroy recommends verifying any suspicious domain before entering personal information.