gro79a-cryptoslate[.]com

The domain gro79a-cryptoslate.com was registered on May 18, 2026 through Ultahost, Inc. It resolves to the IP address 75.2.60.5, which is tied to an AWS Global Accelerator node located in the United States. DNS resolution is handled by two Cloudflare name servers (mark.ns.cloudflare.com and nucum.ns.cloudflare.com), and the site presents a valid Let’s Encrypt certificate (E8). The HTTP response returns status code 200, indicating the server is actively serving content.

The landing page mimics a CryptoSlate article, using the title “OmniPact Secures $50 Million to Advance Trust Infrastructure | CryptoSlate”. The content is crafted to lure readers into believing they are viewing a legitimate news release, a classic technique for credential harvesting. No visible redirects or download prompts are present, but the page’s structure and branding are designed to induce trust.

Threat intelligence shows the domain appears on a single security blocklist (PhishDestroy) and was referenced in one AlienVault OTX pulse. Automated scanning on VirusTotal returned zero detections across 95 engines, and the Gridinsoft trust score is recorded as 0 out of 100, reflecting an extremely low reputation. The combination of blocklist inclusion, OTX mention, and the low trust score supports a phishing classification despite the lack of antivirus flags.

Defenders should add gro79a-cryptoslate.com to inbound and outbound filtering rules and monitor DNS queries for the associated IP and name servers. Network sensors should be configured to alert on HTTP 200 responses from this host, and any credential submissions to the site should be logged and investigated. Users should be warned that communications referencing CryptoSlate or large funding announcements may be fraudulent, and the domain should be included in threat‑intel sharing feeds.