grand5win[.]top

The domain grand5win.top is a phishing site engaged in brand impersonation, specifically targeting users of the platform 'blast'. This scam operates as a credential or login phishing scheme, presenting itself as a legitimate sports and betting portal under the guise of the title 'GRAND5WIN | Enter the world of sport and stakes!'. As of the latest verification, grand5win.top has been taken offline, though it previously posed an elevated risk to visitors seeking the authentic blast service.

Technical indicators confirm the malicious nature of grand5win.top. The domain was flagged by 2 of 95 VirusTotal security vendors, including SOCRadar and Trustwave, and appears on 1 security blocklist (PhishDestroy). Registered through Web Commerce Communications Limited on August 30, 2025, it resolved to the IP address 57.129.97.29, hosted by OVH SAS in Germany (AS16276). No SSL certificate was available, and the domain used Cloudflare nameservers (brit.ns.cloudflare.com and steven.ns.cloudflare.com). At the time of assessment, the site returned an HTTP 429 status, and Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with grand5win.top should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on their blast account and any other platforms where the same credentials were reused. Monitor financial and account activity for signs of fraud, such as unauthorized transactions or login attempts. Report the phishing domain to the impersonated brand (blast) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.