gro83k[.]net

The domain gro83k.net was registered on May 08, 2026 through Tucows Domains Inc. and is currently flagged as an active generic phishing site targeting investors. Analysis of the page title – “GRO83K Token – Official Presale Website - Up to 200% Early Participation Bonus” – aligns with the reported scam type of an investment‑scam token presale, where promises of high early‑participation returns are used to lure victims.

Infrastructure inspection shows the domain resolves to the IPv4 address 99.83.231.61, hosted on an AWS Global Accelerator endpoint located in the United States. The site presents a valid Let’s Encrypt certificate (issuer E8) and is served over HTTPS, which may increase user confidence. Nameservers are set to anton.ns.cloudflare.com and eva.ns.cloudflare.com, indicating use of Cloudflare DNS services. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, where it has already been listed by PhishDestroy. An AlienVault OTX pulse references the domain in one threat‑intel record, reinforcing its association with malicious activity.

Technical evidence includes an HTTP 200 response indicating the page is reachable, and the lack of detections on VirusTotal (0/95) should not be interpreted as a safety indicator, as many phishing sites evade automated scanners. The combination of a newly created domain, low trust score, and presence on a blocklist, together with the investment‑centric lure, strongly suggests a credential‑harvesting or financial‑fraud operation.

Defenders should add gro83k.net to network and email deny lists, monitor for related DNS queries, and consider sinkholing the associated IP address. Continuous threat‑intel feeds should be consulted for any emerging indicators, and user awareness campaigns should highlight the specific claim of a “200% early participation bonus” as a typical lure used by this campaign.