grandvestor[.]com

This domain, grandvestor.com, is identified as a credential theft impersonation site. It poses a significant risk to users by attempting to capture sensitive login information. The domain does not appear to impersonate a specific brand but operates as a generic phishing site, potentially targeting a wide range of online services.

Infrastructure analysis reveals that grandvestor.com has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a low but notable detection rate. The domain is registered through OwnRegistrar, Inc., and resolves to the IP address 163.61.188.5. It was created on April 10, 2026, and currently appears on 1 security blocklist. The domain is listed as offline in the Google Safe Browsing (GSB) status, and it is blocked by the PhishDestroy system. Additionally, the domain has been cited in 1 threat intelligence pulse on AlienVault OTX.

The current status of grandvestor.com is offline, which reduces the immediate risk to users. However, the domain could be reactivated, and the infrastructure remains in place, posing a residual threat. It is recommended that users who may have interacted with this domain change their passwords and enable two-factor authentication on affected accounts. Organizations should update their threat intelligence feeds and ensure their security systems are configured to block any future activity from this domain. Further monitoring and analysis are advised to detect any re-emergence of the threat.