gro82x-cryptoslate[.]com

The domain gro82x-cryptoslate.com is currently active and resolves to the IP address 192.142.10.5 located in the Netherlands under Ultahost Inc. Registration data shows the domain was created on March 14, 2026 through NiceNIC International Group Co., Limited and is using Cloudflare nameservers (howard.ns.cloudflare.com, nelci.ns.cloudflare.com). The site returns HTTP 200 and presents the page title "OmniPact Secures $50 Million to Advance Trust Infrastructure | CryptoSlate," indicating an attempt to masquerade as CryptoSlate content. The domain has been flagged by PhishDestroy and appears on one security blocklist. VirusTotal reports eight detections out of ninety‑four scanners, Gridinsoft assigns a trust score of 0/100, and AlienVault OTX references the domain in eight threat pulses. While the exact payload and credential‑capture mechanisms have not been publicly disclosed, the convergence of multiple detections, low trust score, and brand‑spoofing behavior classifies the infrastructure as high‑risk. Defenders should block the domain and its associated IP at perimeter defenses, add the host to internal blocklists, and monitor for any related C2 traffic. Continuous intelligence gathering is recommended to determine if additional phishing pages or malware drops are deployed behind the same infrastructure.