grandpashabet-onlineoyun[.]vip

Analysis dated July 20 2026 indicates that the domain grandpashabet-onlineoyun.vip was registered on July 15 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 104.21.41.250 and uses Cloudflare nameservers ashley.ns.cloudflare.com and will.ns.cloudflare.com. VirusTotal reports that three of ninety‑one scanning engines have flagged the domain, confirming a malicious reputation despite the relatively low detection count. The domain appears on one external blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a high‑risk phishing infrastructure. Current WHOIS data shows the domain remains active as of the report date. Publicly available intelligence does not include details such as SSL certificate attributes, HTTP response codes, page title, or content analysis, so the exact landing page behavior cannot be confirmed. The limited detection footprint suggests the site may be newly deployed or employing evasion techniques, but the presence of multiple security vendor detections and blocklist listings indicates active malicious use. Defenders should add grandpashabet-onlineoyun.vip to DNS and URL filtering policies, enforce blocklisting on proxy and firewall solutions, and monitor outbound traffic for connections to 104.21.41.250. Given the Cloudflare hosting, additional scrutiny of traffic patterns and potential use of shared infrastructure is advised. Continuous re‑scanning with multi‑engine services is recommended to capture any evolution in the domain’s threat profile.