# gro87x-cryptoslate.com — SUSPICIOUS

> gro87x-cryptoslate.com is a crypto drainer domain with 0/95 VirusTotal detections. Domain created March 31, 2026, registered via NameSilo.

## Summary
PhishDestroy identifies gro87x-cryptoslate.com as an active crypto drainer posing as a cryptocurrency news platform. This domain is engineered to trick visitors into connecting their crypto wallets under false pretenses, then silently draining funds via malicious smart contract interactions. The threat is heightened by the domain’s recent creation—just days old—and its use of a legitimate-looking name to exploit brand confusion in the crypto space.  This domain was flagged after analysis revealed zero detections on VirusTotal from 95 scanning engines, despite clear red flags: the domain resolves to IP 104.21.67.10, was registered through NameSilo, LLC on March 31, 2026, and uses a Let’s Encrypt SSL certificate to appear trustworthy. The combination of a newly registered domain, low detection rate, and cryptocurrency targeting aligns with emerging crypto drainer campaigns that bypass traditional security filters by operating under the radar.  If you visited gro87x-cryptoslate.com, disconnect your wallet immediately using your wallet’s emergency disconnect feature. Revoke any unauthorized smart contract approvals via tools like revoke.cash or Etherscan’s approval checker. Monitor your transaction history for unauthorized transfers and consider transferring remaining funds to a new wallet. Report the domain to your antivirus vendor and file a complaint with the FBI IC3 or local cybercrime units to help disrupt the operation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-31 01:50:18
- Registrar: NameSilo, LLC
- IP: 104.21.67.10

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/02ca776a-557d-41b7-9264-c43b99b410e8
- PhishDestroy: https://phishdestroy.io/domain/gro87x-cryptoslate.com/
- LLM endpoint: https://phishdestroy.io/domain/gro87x-cryptoslate.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gro87x-cryptoslate.com/
Last updated: 2026-04-01