gro77z-cointelegraph[.]com

PhishDestroy identifies gro77z-cointelegraph.com as an active phishing domain impersonating the legitimate cryptocurrency news outlet Cointelegraph. This domain leverages typo-squatting and brand impersonation to deceive users into believing they are interacting with authentic financial news content. The threat actor behind this campaign likely aims to harvest cryptocurrency wallet credentials, seed phrases, or personal financial data by presenting fake giveaways, investment opportunities, or exclusive news alerts. Users who engage with this domain risk falling victim to credential theft or financial fraud, as the site is designed to appear legitimate at first glance through the use of a Let's Encrypt SSL certificate and a domain name that closely resembles the original. This domain was flagged by PhishDestroy after analysis revealed critical red flags. VirusTotal currently reports 0 detections out of 95 security engines, indicating that mainstream antivirus and threat intelligence platforms have not yet flagged this domain. The domain was registered through Ultahost, Inc., a hosting provider known for accommodating both legitimate and malicious websites. The domain was created on April 14, 2026, which suggests it is a recently deployed threat. Additionally, the domain resolves to IP address 104.21.56.4, which has been associated with other phishing and scam campaigns in the past. These indicators collectively suggest a coordinated effort to exploit trust in cryptocurrency news platforms for malicious purposes. Users who have visited gro77z-cointelegraph.com are strongly advised to take immediate precautions. Do not enter any personal information, credentials, or cryptocurrency wallet details on this site. If you have already entered sensitive data, change your passwords immediately and transfer any cryptocurrency from wallets that may have been compromised. Scan your devices for malware using reputable security software, as this domain may also serve as a vector for malware distribution. Report this domain to your cybersecurity team or to platforms like PhishDestroy to help prevent further victimization. Avoid clicking on any links from unsolicited emails or messages that reference this domain, as they are likely part of the same phishing campaign. Stay vigilant against similar typo-squatting domains, and always verify the legitimacy of websites by checking for HTTPS certificates and official domain spellings.