season2-grvt[.]cc

This domain is flagged as an elevated-risk crypto drainer specifically designed to target cryptocurrency traders through brand impersonation. Analysis indicates the infrastructure mimics legitimate on-chain trading platforms, with the page title explicitly presenting itself as 'Grvt | On-chain investment and trading app.' The threat type involves wallet-draining scripts that execute unauthorized transactions once victims connect their wallets, a common tactic in decentralized finance (DeFi) fraud schemes. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain season2-grvt.cc was registered on March 02, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to IP address 104.21.91.97. Security vendors on VirusTotal flagged the domain at 8/95 detections, while it appears on three independent security blocklists. Additional protections include blocks by MetaMask, PhishDestroy, and SEAL. The site employs Cloudflare for hosting and performance monitoring, evidenced by Cloudflare Browser Insights and HTTP/3 protocol usage. A Let's Encrypt SSL certificate provides encryption, though this is standard even for malicious domains. Trust scoring from Gridinsoft rates the domain at 0/100, indicating no legitimate use case. Mitigation against this crypto drainer requires immediate action from both users and security teams. Users who may have interacted with the domain should revoke any connected wallet permissions through their wallet settings or a blockchain explorer interface. All transactions originating from the period of exposure should be audited for unauthorized transfers. Security teams should update blocklists with the domain and IP address, monitor for related subdomains or newly registered lookalike domains, and deploy detection rules for wallet-draining scripts. Given the domain's current offline status, continued monitoring for re-emergence under similar naming conventions is recommended, as threat actors frequently reuse infrastructure patterns.