grociesmrocies[.]com

This domain, grociesmrocies.com, is actively engaged in credential harvesting phishing operations targeting users through deceptive login interfaces. Analysis indicates the site mimics legitimate service portals to capture sensitive authentication details, including usernames, passwords, and potentially multi-factor authentication tokens. The infrastructure is designed to exfiltrate stolen credentials to attacker-controlled servers for subsequent unauthorized access or financial fraud. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain is flagged by 17 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly categorizing it as phishing. It resolves to the IP address 104.21.66.176, hosted on a content delivery network known for anonymizing malicious traffic. The domain was registered through Tucows Domains Inc. on February 21, 2026, an anomalous creation date suggesting potential domain spoofing or backdating. It appears on four distinct security blocklists, including enterprise-grade threat intelligence feeds, further corroborating its malicious classification. Users who have visited grociesmrocies.com or entered credentials on the site should immediately revoke any submitted authentication details from associated accounts. It is recommended to perform a full security audit of devices used to access the domain, including malware scans and network traffic analysis for signs of compromise. All passwords for accounts accessed from the same device or network session should be rotated using a secure password manager. Network administrators should implement DNS-based blocking of the domain and its resolving IP address to prevent further exposure within organizational environments.