grows.global: Google 사칭. PhishDestroy가 2026-07-27에 탐지했습니다. 위험도: 심각 (88/100). 등록 대행자: 1API. 상태: 마지막으로 알려진 활성. 호스팅: Fastly, Inc. VirusTotal: 엔진 5/89개가 탐지. PhishDestroy는 VirusTotal 엔진이 탐지하기 17일 전에 이 도메인을 탐지했습니다(PhishDestroy 점검 기준). 로그인 정보를 입력하거나 지갑을 연결하지 마세요.
grows.global presents itself as "Grows | Reach your goals in a smart way," a polished savings-and-goals pitch that PhishDestroy classifies as an impersonation phishing page. It targets people who believe they are dealing with a legitimate financial or crypto service under the Grows name. PhishDestroy first flagged it on 2026-07-27. As of 2026-10-19 the site was still online, with its content reachable but placed behind a protection layer.
How the scam works
Impersonation pages borrow the look, name and tone of a trusted service so visitors lower their guard. The upbeat slogan in the page title sells the idea of smart, effortless growth, which is the hook used to get visitors to sign in, register or deposit. Anything typed into such a page, such as passwords, one-time codes, personal details or payment data, goes straight to the operators. Money sent in response to the "grow your funds" promise cannot be recovered. The page title advertises a goal-planning service, while our classification is impersonation phishing.
Evidence
On 2026-09-14, five of 89 VirusTotal engines flagged the domain: alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar and the Vietnamese anti-scam group Chong Lua Dao. That is a modest count, so many browsers and filters will still let the page load without a warning. Four AlienVault OTX threat pulses reference the domain, which shows other researchers have tracked it independently. PhishDestroy is currently the blocklist carrying it.
Infrastructure
The domain was registered on 2022-04-18 through 1API GmbH, more than four years before PhishDestroy detected it. An aged domain like this tends to avoid the suspicion that fresh registrations attract. The site is served from Fastly, Inc. infrastructure in the US at 199.36.158.100, behind a Google Trust Services certificate. Because of that setup, the padlock and the reputable delivery network say nothing about who actually runs the page.
What to do
If you signed up or logged in on grows.global, change that password immediately, along with any account that reuses it, and turn on app-based two-factor authentication. If you sent money or card details, contact your bank or payment provider right away to dispute the charges. Do not send further "activation" or "unlock" payments. If you were looking for a real Grows service, reach it only through an address you have verified yourself. Security teams should block the domain and its IP at DNS and proxy level, and search mail and web logs for users who reached it after 2026-07-27.
아니요. PhishDestroy는 grows.global을(를) Google 사칭(으)로 분류합니다(위험도: 심각, 88/100). 처음 탐지된 날짜는 2026-07-27입니다. VirusTotal: 엔진 5/89개가 탐지. PhishDestroy는 VirusTotal 엔진이 탐지하기 17일 전에 이 도메인을 탐지했습니다(PhishDestroy 점검 기준). 안전하지 않은 사이트로 취급하세요.
grows.global에 지갑을 연결해도 안전한가요?
아니요. grows.global에서 지갑을 연결하거나 메시지에 서명하거나 토큰을 승인하지 마세요. 피싱 사이트는 운영자가 자산을 옮길 수 있게 하는 승인(approve, setApprovalForAll, Permit2)을 요청하며, 확정된 거래는 되돌릴 수 없습니다.
grows.global을(를) 이용했다면 어떻게 해야 하나요?
그곳에 입력한 모든 비밀번호를 바꾸고 2단계 인증을 켜세요. 지갑을 연결했거나 무언가에 서명했다면 승인을 취소하고 남은 자금을 새 지갑으로 옮기세요. 시드 문구는 절대 공유하지 마세요. 단계별 안내: 긴급 대응 가이드.
이 gTLD의 경우 위 레지스트라는 ICANN 공인 계약에 따라 운영됩니다. 아래 링크에서 공식 수수료 체계와 현행 DNS 악용 대응 준수 지침을 확인할 수 있습니다.
공인은 계약일 뿐, 안전성 인증이 아닙니다.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Primary outcomeReachable but protectedreason: Captcha85% confidence
Attributionmechanism: Challengesource: Current Http Probe
Evidence layersAvailability: Reachable but protectedContent: UnknownDNS: ResolvedRegistration: Unknown
Latest HTTP observationReachable but protectedCaptchaChallenge85%2026-10-22 10:28:34 UTC
RDAP registration알 수 없음
Observed timelinelast reachable: 2026-10-22 10:28:34 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
기술 · 5 identified
F
Firebase
DatabasesDevelopment
Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.
(DE)
