get-grass[.]io

The domain get-grass.io is a generic phishing site with no confirmed impersonation of a specific brand or use of a drainer kit. As of the latest verification, get-grass.io poses a phishing threat designed to harvest user credentials or sensitive information through deceptive means. The site has been taken offline, but its prior activity classifies it as unsafe for users who may have interacted with it.

Technical indicators for get-grass.io show 0 of 95 VirusTotal vendors flagging the domain, and Google Safe Browsing has not marked it as malicious. However, the domain appears on 2 security blocklists, specifically PhishDestroy and ScamSniffer. Registered through Cloudflare, Inc on February 21, 2026, get-grass.io resolves to the IP address 188.114.97.3, hosted by Cloudflare, Inc. in the US. The SSL certificate is issued by Google Trust Services / WE1, and the domain uses Cloudflare nameservers (irma.ns.cloudflare.com and ram.ns.cloudflare.com). Technologies detected include Cloudflare Browser Insights and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who may have entered credentials on get-grass.io should immediately change passwords for any accounts accessed during the interaction and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions or platforms. To assist in mitigation, victims can report the domain to anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group (APWG). If the site was accessed via a link in an email or message, the sender should also be reported as malicious.