grok46k[.]com

This domain, grok46k.com, is identified as a cryptocurrency presale phishing site targeting users with fraudulent token sale offers. The page title, 'GROK46K Official Website Presale (up to 200% bonus),' suggests an attempt to impersonate legitimate token presales, a common tactic to lure victims into transferring funds under false pretenses. No specific drainer kit or brand association has been confirmed, but the infrastructure aligns with known cryptocurrency scam patterns. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 6 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. It was registered on May 15, 2026, through Internet Domain Service BS Corp, a registrar frequently associated with high-risk domains. The domain resolves to IP address 99.83.231.61, which may host additional malicious infrastructure. It appears on one security blocklist and has a trust score of 0/100, further corroborating its malicious nature. Google Safe Browsing (GSB) status is not explicitly provided, but the domain's offline status suggests possible takedown or evasion efforts. As of the latest assessment, grok46k.com is offline, likely due to takedown actions or voluntary suspension by the threat actor. However, the domain remains registered, posing a residual risk of reactivation or migration to alternative infrastructure. Users who interacted with the site should assume potential exposure of wallet credentials or financial details. Organizations are advised to monitor for related domains registered under the same registrar or resolving to the same IP range, as threat actors often reuse infrastructure across campaigns.