gro82x-cointelegraph[.]com
“Elon Musk Officially Launches GRO82X Presale”
gro82x-cointelegraph.com — 服务器错误 (HTTP 502). 品牌冒充:Across; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 9/91 (alphaMountain.ai, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker); Spamhaus DBL_PHISH; PhishDestroy score 77/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain is flagged as a generic phishing site targeting cryptocurrency users through brand impersonation and fraudulent presale schemes. Analysis indicates the page falsely claims an official endorsement from Elon Musk to promote a fictitious GRO82X token presale, a common tactic in crypto drainer and investment scam operations. The domain exhibits elevated risk due to its deceptive content and technical indicators associated with phishing infrastructure. Infrastructure analysis reveals the domain gro82x-cointelegraph.com resolves to the IP address 192.142.10.5 and was registered on March 14, 2026, through NiceNIC International Group Co., Limited. Security vendor detections on VirusTotal report 8 out of 95 engines flagging the domain as malicious. The site appears on at least one security blocklist and is currently offline, though prior activity included technologies such as WordPress, MySQL, PHP, Vue.js, and Google Analytics. The page title, 'Elon Musk Officially Launches GRO82X Presale,' directly aligns with known phishing patterns designed to exploit trust in high-profile individuals to facilitate cryptocurrency theft. Mitigation steps for users who may have interacted with this domain include immediate disconnection from any associated wallets or accounts, revocation of smart contract approvals, and monitoring for unauthorized transactions. Users should verify all cryptocurrency investment opportunities through official channels only, avoiding unsolicited links or promotions. Security teams are advised to block the domain and its resolving IP at the network level, while domain registrars and hosting providers should be notified of abuse for potential takedown. Given the domain's registration date in the future (2026), this may indicate either a typographical error in the data or an attempt to evade detection through falsified registration details.
网络安全情报 Registrar context
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-15 03:03:38 UTC
所用技术 · 9 identified
Open-source CMS powering over 40% of websites worldwide.
Open-source relational database management system.
Server-side scripting language designed for web development.
Progressive JavaScript framework for building user interfaces.
High-performance web server compatible with Apache configurations.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of gro82x-cointelegraph.com · checked Jun 26, 2026
证据与外部报告
PD-20260314-3D86B4 Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。