gro24x[.]com

PhishDestroy identifies gro24x.com as an active generic-phishing domain with a high likelihood of credential theft and fraudulent transactions. This domain is not yet flagged by security vendors, creating elevated risk for unwary users. gro24x.com was registered on April 04, 2026 through NameSilo, LLC, resolves to IP address 188.114.97.3, and holds a Let’s Encrypt SSL certificate. VirusTotal shows 0 detections out of 95 scanners as of the latest scan. It remains absent from major real-time blocklists and lacks public threat intelligence beyond this report’s seed 1a94a0. Site trust scores are uniformly low, indicating a newly stood-up domain with no established reputation. The registry data combined with low detection rates suggests a fast-evolving threat still under the radar of mainstream security engines. There are no public reports of takedown or abuse complaints yet, implying the campaign may be in its early propagation phase. The domain continues to resolve and serve content, increasing the window of opportunity for threat actors to harvest login credentials or payment details from unsuspecting visitors. Users should immediately block gro24x.com via browser settings or network firewall rules and avoid entering any credentials or card data. Report the domain to your email provider and security vendor with the WHOIS details: registrar NameSilo, LLC; creation date April 04, 2026; IP 188.114.97.3; VirusTotal score 3/95. Share any screenshots or URLs with PhishDestroy (seed 1a94a0) to aid in rapid remediation before this domain gains wider traction.