# gro87x.com — SUSPICIOUS

> gro87x.com is a newly registered crypto phishing domain with 0/95 VirusTotal detections. Avoid entering wallet details to prevent theft.

## Summary
PhishDestroy identifies gro87x.com as a generic phishing domain currently under investigation for suspected cryptocurrency drainer operations. The domain exhibits no brand association, indicating opportunistic targeting of crypto users. No drainer kit signatures were detected in public scans, but the threat remains active and unclassified.  

This domain was flagged with a VirusTotal detection score of 0/95, registered through NameSilo, LLC on March 31, 2026. It resolves to IP 185.254.199.117 and holds a valid Let’s Encrypt SSL certificate. Gro87x.com remains unlisted on Google Safe Browsing and has not been added to major threat intelligence blocklists at this time.  

The domain is currently active with an 'under_investigation' status. Users should avoid interaction and report any encounters to security teams. Remaining risk is medium due to unresolved classification and zero detections. Blocking at the network level is recommended until further analysis is complete.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-31 01:50:03
- Registrar: NameSilo, LLC
- IP: 185.254.199.117

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/gro87x.com
- PhishDestroy: https://phishdestroy.io/domain/gro87x.com/
- LLM endpoint: https://phishdestroy.io/domain/gro87x.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/gro87x.com/
Last updated: 2026-04-05