gro58e-cointelegraph[.]com

This domain, gro58e-cointelegraph.com, is flagged as a brand impersonation threat targeting CoinTelegraph, a well-known cryptocurrency and blockchain news platform. Analysis indicates the site promoted a fraudulent cryptocurrency presale under the guise of an official launch by a high-profile individual, leveraging social engineering tactics to deceive users into transferring funds or disclosing sensitive credentials. The page title, 'Elon Musk Officially Launches GRO58E Presale,' is a clear indicator of malicious intent, as it exploits the reputation of a public figure to lend credibility to the scam. Infrastructure analysis reveals the domain was registered through Ultahost, Inc., and resolves to the IP address 75.2.60.5. The domain was created on May 13, 2026, an anomalous date suggesting potential manipulation of registration records or a placeholder for future malicious activity. VirusTotal detection metrics show 5 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. Gridinsoft assigns a trust score of 0 out of 100, further corroborating its fraudulent nature. The domain is also blocked by multiple security frameworks, including MetaMask, PhishDestroy, and SEAL, which are designed to protect users from phishing and scam websites. As of the latest assessment, gro58e-cointelegraph.com has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the residual risk remains elevated, as threat actors may re-establish the infrastructure under a different domain or IP address. Users who interacted with the site are advised to monitor their cryptocurrency wallets for unauthorized transactions and revoke any permissions granted to suspicious smart contracts. Organizations should update their blocklists to include this domain and its associated indicators of compromise, such as the resolving IP address, to prevent future access attempts. Vigilance is recommended, as similar scams often reappear with minor variations in domain naming or infrastructure.