gro11z-cointelegraph[.]com

The domain gro11z-cointelegraph.com is identified as a phishing site specifically designed to impersonate CoinTelegraph, a well-known cryptocurrency news platform. This domain is categorized under generic phishing with an elevated risk level due to its intent to deceive users into disclosing sensitive credentials or financial information under the guise of legitimate content. As of the latest assessment, the domain has been taken offline, though prior activity remains a documented threat. Analysis of the domain reveals it was created on April 9, 2026, and registered through NameSilo, LLC. Infrastructure investigation shows the domain resolved to the IP address 192.142.10.5. Security vendor assessments indicate that 3 out of 95 VirusTotal engines flagged this domain as malicious. The domain holds a Gridinsoft trust score of 0 out of 100, further corroborating its fraudulent nature. Additionally, it appears on one security blocklist and is actively blocked by at least one threat intelligence feed. Current status confirms the domain is offline, reducing immediate exposure risk. However, historical data and infrastructure patterns suggest potential for re-emergence under similar naming conventions or IP ranges. Organizations and users are advised to implement DNS-level blocking for this domain and monitor for related indicators of compromise. Security teams should review logs for connections to 192.142.10.5 and investigate any unauthorized access attempts tied to cryptocurrency-related phishing campaigns. Proactive measures include updating endpoint protection rules and educating users on identifying impersonation tactics in crypto-related communications.