gro90p-cryptoslate[.]com

This domain, gro90p-cryptoslate.com, is associated with an elevated risk level due to its use in phishing campaigns, specifically targeting users by impersonating the CryptoSlate brand. The threat type identified is brand impersonation, designed to deceive users into believing they are accessing legitimate content related to OmniPact's financial activities.

Technical analysis reveals several key indicators of malicious activity. The domain was created on March 28, 2026, and is currently offline but has been identified on one security blocklist. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.96.3. The SSL certificate was issued by Let's Encrypt, which is often used by malicious actors due to its free and accessible nature. VirusTotal analysis shows that 7 out of 95 security vendors have flagged this domain as malicious. Additionally, it has been noted in one AlienVault OTX threat intelligence pulse, indicating a recognized threat profile. The Gridinsoft trust score is particularly low at 0/100, affirming the domain's lack of credibility.

Mitigation steps for this specific threat type include ensuring that users are educated about the potential dangers of phishing domains that mimic legitimate brands. Organizations should implement domain monitoring tools to detect and block access to such domains preemptively. Security teams need to update blocklists regularly and consider using advanced threat intelligence platforms to identify and mitigate phishing threats swiftly. Users should always verify the authenticity of URLs before engaging with content and report suspicious domains to their IT departments to prevent credential theft and other malicious activities.