gro23p[.]com

The domain gro23p.com has been identified as a high-risk threat primarily focused on credential theft. The site is currently active and displays a page title, 'GRO23P Official Website Presale (up to 200% bonus)', which suggests a deceptive financial incentive likely aimed at collecting sensitive user information. The domain's active status and the nature of the content strongly indicate it is being used to lure unsuspecting users into providing personal data under the guise of a presale or investment opportunity.

Technical analysis reveals that gro23p.com resolves to IP address 64.29.17.1, located in the United States and hosted by Vercel, Inc. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with a creation date of May 19, 2026. Security assessments show that the domain is flagged by 1 out of 95 security vendors on VirusTotal, indicating a low detection rate that could allow it to evade some security measures. Additionally, the domain is included in one known security blocklist, specifically PhishDestroy, which suggests that it is recognized within the security community as a threat.

Users who have visited gro23p.com should immediately review their accounts for any unauthorized activity, especially if any personal or financial information was submitted on the site. It is advisable to change passwords associated with any accounts potentially compromised by this domain. Furthermore, users should consider enabling additional security features such as two-factor authentication on accounts to enhance protection against unauthorized access. Those who suspect their information has been compromised may also wish to monitor credit reports for unusual activity.