check[.]grass-fdn[.]com

The domain check.grass-fdn.com was registered on 2025-11-01 through Tucows Domains Inc. and is currently classified as a high‑risk generic_phishing site. An HTTP request returns status code 521, indicating the origin server is unavailable. The page title reported by scanners is “Invite Code Not Found,” which suggests the site presents a placeholder page rather than a functional service. Infrastructure analysis shows the domain resolves to IP address 172.67.206.165, which belongs to the US‑based AS13335 operated by Cloudflare, Inc. The authoritative nameservers are matt.ns.cloudflare.com and tina.ns.cloudflare.com, confirming the use of Cloudflare’s DNS and CDN services. The TLS certificate is issued by Google Trust Services under the WE1 label, providing a valid HTTPS connection. Threat intelligence sources have flagged the domain on a single security blocklist, and PhishDestroy currently lists it as blocked. VirusTotal scans indicate that 1 out of 95 security vendors has flagged the domain, reflecting limited but existing detection. The combination of a recent registration, use of a reputable CDN, and the generic_phishing classification drives the high risk rating. Observations are limited to the HTTP status, DNS configuration, and the page title; no content analysis of the landing page has been performed, leaving the exact phishing vector unknown. Defenders should consider adding check.grass-fdn.com to deny‑list rules at the network perimeter, monitor DNS queries for the domain, and, where feasible, implement sinkholing of the associated IP address. Continued observation is advised to capture any evolution in payload delivery or additional indicator expansion.