gro68v[.]icu

This domain presents an elevated risk as a generic phishing threat, specifically designed to mimic a cryptocurrency presale. PhishDestroy identifies GRO68V.ICU as a fraudulent operation attempting to lure victims with promises of a 100% bonus during an official pre-sale. The domain's title, GRO68V Official Pre-Sale — Get Up to 100% Bonus!, is a classic hook used in investment scams to create urgency and greed.

Technical indicators paint a damning picture. VirusTotal reports that 13 out of 95 security vendors flag this domain as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 4, 2026, and resolves to IP address 216.203.20.169. It appears on one security blocklist and is linked to one threat intelligence pulse on AlienVault OTX. Although the site currently appears offline, its SSL certificate was issued by Let's Encrypt (R13), a common choice for quick, low-cost deployments. The domain creation date in 2026 suggests it was recently set up, consistent with a short-lived phishing campaign.

Users who have encountered this domain should take immediate action. Since it is a generic phishing attempt targeting cryptocurrency presales, do not provide any personal information, wallet addresses, or send funds. If you have already interacted with the site, change any passwords used elsewhere and monitor financial accounts for unauthorized activity. Report the domain to relevant authorities or cybersecurity platforms. As the site is now offline, the immediate threat is contained, but vigilance is advised as similar domains may reappear under different names.