# gro79p.net — SUSPICIOUS

> gro79p.net is actively used for credential harvesting phishing, detected by 0 of 95 VirusTotal vendors. Immediate verification advised. Check the full report.

## Summary
PhishDestroy identifies gro79p.net as a live credential harvesting domain currently under active phishing operations. The domain has been confirmed as a legitimate threat vector and remains in an investigative status pending further forensic analysis.  gro79p.net was flagged by 0 of 95 VirusTotal vendors at the time of discovery, indicating a low initial detection rate despite clear malicious intent. The domain resolves to IP address 195.26.86.75, is registered through NameSilo, LLC, and secured with a Let’s Encrypt SSL certificate. It was created on April 02, 2026, and has not yet been listed on major threat intelligence blocklists, resulting in neutral trust scores across most reputation engines.  The current status of gro79p.net remains active and under investigation. Security teams are advised to block all inbound and outbound traffic to 195.26.86.75 at the network perimeter and inspect DNS logs for recent resolutions. Users should avoid accessing the domain and report any accidental interactions immediately. Enhanced monitoring of SSL certificates issued to NameSilo domains is recommended to prevent similar campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-02 14:51:05
- Registrar: NameSilo, LLC
- IP: 195.26.86.75

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/gro79p.net
- PhishDestroy: https://phishdestroy.io/domain/gro79p.net/
- LLM endpoint: https://phishdestroy.io/domain/gro79p.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gro79p.net/
Last updated: 2026-04-03