gro87x-cryptoslate[.]com

PhishDestroy identifies gro87x-cryptoslate.com as an active crypto drainer posing as a cryptocurrency news platform. This domain is engineered to trick visitors into connecting their crypto wallets under false pretenses, then silently draining funds via malicious smart contract interactions. The threat is heightened by the domain’s recent creation—just days old—and its use of a legitimate-looking name to exploit brand confusion in the crypto space. This domain was flagged after analysis revealed zero detections on VirusTotal from 95 scanning engines, despite clear red flags: the domain resolves to IP 104.21.67.10, was registered through NameSilo, LLC on March 31, 2026, and uses a Let’s Encrypt SSL certificate to appear trustworthy. The combination of a newly registered domain, low detection rate, and cryptocurrency targeting aligns with emerging crypto drainer campaigns that bypass traditional security filters by operating under the radar. If you visited gro87x-cryptoslate.com, disconnect your wallet immediately using your wallet’s emergency disconnect feature. Revoke any unauthorized smart contract approvals via tools like revoke.cash or Etherscan’s approval checker. Monitor your transaction history for unauthorized transfers and consider transferring remaining funds to a new wallet. Report the domain to your antivirus vendor and file a complaint with the FBI IC3 or local cybercrime units to help disrupt the operation.