gro82x[.]net

As of July 12, 2026, the domain gro82x.net is flagged as a high-risk generic phishing site. The page title 'GRO82X Token – Official Presale Website - Up to 200% Early Participation Bonus' suggests that the domain is being used to impersonate a legitimate cryptocurrency presale, which is a common tactic in phishing campaigns. The domain was created on March 13, 2026, which is relatively recent and aligns with the active nature of the threat. The domain resolves to an IP address located in the Netherlands, 192.142.10.5, which is associated with Ultahost Inc. This geographic location and hosting service do not inherently indicate malicious activity, but the context of the domain's use does raise concerns. The nameservers for gro82x.net are managed by Cloudflare, specifically howard.ns.cloudflare.com and nelci.ns.cloudflare.com, which is a common configuration for both legitimate and malicious domains. However, the Gridinsoft trust score of 0/100 and the fact that the domain is listed on a security blocklist and mentioned in a threat intelligence pulse on AlienVault OTX further substantiate the high-risk status. While the HTTP status of 200 indicates that the domain is operational, the presence of the domain on a blocklist and the low trust score should serve as strong indicators to network defenders to take precautionary measures. It is recommended that security teams monitor traffic to this domain and consider blocking access to prevent potential compromise. Additionally, users should be cautious and verify the legitimacy of any presale or token offering they encounter, especially if it promises unusually high early participation bonuses.