gro77z-cryptoslate[.]com

PhishDestroy has flagged gro77z-cryptoslate.com as an active crypto wallet phishing domain designed to trick users into revealing sensitive wallet credentials. The site mimics legitimate cryptocurrency news portals to lure victims with false promises of exclusive crypto insights, only to harvest private keys or seed phrases. Once entered, the stolen credentials are often used to drain digital assets or facilitate follow-on fraud. This domain was flagged by PhishDestroy due to multiple red flags, including a low detection rate of just 1 out of 95 security vendors on VirusTotal. The domain was registered on April 14, 2026, through Ultahost, Inc., a hosting provider known for accommodating high-risk domains. The site also uses a Let’s Encrypt SSL certificate to appear legitimate, but the certificate is linked to a known malicious IP address (172.67.222.124). These factors indicate a recently established, short-lived campaign targeting cryptocurrency users. If you visited gro77z-cryptoslate.com, assume your wallet credentials may have been compromised. Immediately transfer any remaining funds to a newly generated wallet with a different seed phrase. Revoke permissions for any connected applications and enable two-factor authentication on all crypto-related accounts. Report the domain to your security team and consider running a malware scan on any device used to access the site. Avoid interacting with this domain or related links, and warn others who may have been exposed.