gro36v-cryptoslate[.]com

Analysis shows that gro36v-cryptoslate.com was registered through NameSilo, LLC on April 02 2026 and is currently routed through Cloudflare’s network (celeste.ns.cloudflare.com, vick.ns.cloudflare.com) to IP 188.114.96.3, an address associated with Cloudflare, Inc. The site presents a 403 HTTP response and a Cloudflare challenge page titled “Just a moment…”, confirming the presence of Cloudflare Browser Insights and HTTP/3 support. An SSL certificate issued by Let’s Encrypt (E7) secures the connection. Threat intelligence indicates that one of ninety‑four VirusTotal scanners flagged the domain, it appears on a single security blocklist, and Gridinsoft assigned a trust score of 0 / 100. AlienVault OTX records the domain in one pulse, and PhishDestroy has listed it as blocked. No additional content, targeted brand, or phishing kit details are available beyond the generic page title, leaving the exact lure unknown. Defenders should treat the domain as high risk, block DNS resolution to 188.114.96.3, add the domain to internal and external blocklists, monitor for related Cloudflare‑protected domains, and update detection signatures to capture similar newly created, Cloudflare‑fronted phishing infrastructure.