grandpashabet93734[.]com

Analysis of grandpashabet93734.com shows the domain was registered on 28 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The authoritative nameservers, guy.ns.cloudflare.com and hattie.ns.cloudflare.com, indicate the domain is hosted behind Cloudflare's network. DNS resolution returns the IPv4 address 188.114.97.3, a Cloudflare edge node commonly used by malicious actors to hide origin infrastructure. The domain appears on a single public blocklist, PhishDestroy, confirming that at least one security provider has flagged it as malicious.

VirusTotal records indicate the domain has been scanned by 91 antivirus and URL‑reputation engines; none have issued a detection at the time of this assessment, but the absence of a detection does not imply benign intent. No public data on the site’s SSL certificate, HTTP response codes, Safe Browsing status, OTX mentions, or page title have been disclosed, leaving those vectors unverified. Consequently, the exact content served by the domain remains unknown, and the specific phishing lure or credential‑harvesting technique cannot be confirmed. The short lifespan—registered only three days before the report date—combined with the use of Cloudflare and presence on a phishing‑focused blocklist aligns with patterns observed in rapidly deployed phishing campaigns.

Defenders should add 188.114.97.3 to network‑level blocklists and monitor DNS queries for grandpashabet93734.com. Email gateways should be configured to reject or quarantine messages containing URLs pointing to this domain. Continuous re‑evaluation of the domain’s status on VirusTotal, Safe Browsing, and other reputation services is recommended, as detection outcomes may change after further analysis. If any internal users report suspicious emails referencing the domain, incident response teams should capture the full URL, headers, and any payload for deeper forensic examination.