gro90p[.]icu

The domain gro90p.icu has been assessed as a confirmed phishing site with an elevated risk level. This determination is based on the domain's current offline status, the specific technologies detected, and the low trust score from reputable sources.

Analysis indicates that gro90p.icu was created on March 28, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 188.114.97.3. It has been flagged by 13 out of 95 security vendors on VirusTotal, and it currently appears on 1 security blocklist. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trust. The page title detected was 'GRO90P Official Pre-Sale — Get Up to 100% Bonus!', which is typical of phishing sites that attempt to lure users with false offers or incentives. The domain also uses technologies such as particles.js, jsDelivr, Cloudflare Browser Insights, and Cloudflare, which can be employed to enhance the visual appeal and credibility of the phishing site.

To mitigate the risk associated with this phishing domain, it is recommended that users avoid visiting gro90p.icu and any links related to it. Network administrators should update their DNS blacklists to include the domain and its associated IP address, 188.114.97.3. Additionally, security teams should monitor for any new subdomains or similar domain names that may be used by the threat actors to continue their phishing activities. Regular updates to security software and user education on recognizing phishing attempts are also crucial in preventing further compromise.