grant-nanoeth[.]net

Analysis of the domain grant-nanoeth.net indicates an active phishing campaign impersonating the County of Los Angeles, as evidenced by the page title 'COUNTY OF LOS ANGELES' detected in technical scans. The domain was registered on February 26, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site resolves to IP address 45.60.151.78, which has been flagged in multiple threat intelligence sources. As of July 12, 2026, the domain remains active and is listed on three security blocklists, including SEAL, MetaMask, and PhishDestroy, suggesting targeted detection by financial and web3 security tools. The domain employs Cloudflare for hosting and protection, alongside technologies such as Chart.js and jsDelivr, which may be used to enhance the appearance of legitimacy or facilitate data exfiltration. A Let's Encrypt SSL certificate is present, providing encrypted connections that could mislead users into trusting the site. AlienVault OTX records show the domain in four threat intelligence pulses, further corroborating its malicious classification. While 19 of 95 security vendors on VirusTotal flag the domain as malicious, the exact nature of the phishing content—beyond the impersonation of a government entity—has not been fully analyzed. Defenders are advised to block the domain at the network level, monitor for related infrastructure, and alert users to the risk of credential theft or financial fraud associated with this campaign.