gro11z-cryptoslate[.]com

PhishDestroy identifies gro11z-cryptoslate.com as a generic phishing domain masquerading as a legitimate cryptocurrency platform. This domain leverages spoofed branding to deceive users into surrendering sensitive wallet credentials or transferring digital assets through a sophisticated drainer kit. The threat actor registered this domain to exploit trust in the CryptoSlate brand, targeting cryptocurrency investors with fraudulent offers or investment schemes. This domain resolves to IP 192.142.10.5 and was registered through NameSilo, LLC on April 07, 2026. VirusTotal analysis shows a low detection rate, with only 2 out of 95 security vendors flagging the domain. The SSL certificate issued by Let's Encrypt may further lend an air of legitimacy, though it provides no guarantee of safety. Given its recent creation and minimal blocklist coverage, this domain presents an elevated risk of exploitation. As of the latest assessment, gro11z-cryptoslate.com remains active and classified with an elevated risk level. Users are advised to block this domain at the network level and avoid all interactions. Security teams should add this domain and its associated IP to blocklists and investigate any related infrastructure. Despite active monitoring, residual risk remains due to the domain’s novelty and low initial detection rate.