gro90p[.]com

This domain, gro90p.com, is identified as a cryptocurrency presale phishing site designed to deceive users into transferring funds under the pretense of a token sale offering up to 200% bonuses. The fraudulent page mimics legitimate initial coin offering (ICO) or presale events, a common tactic to exploit investors seeking early access to new cryptocurrencies. The site’s infrastructure and promotional language—including unrealistic financial incentives—align with known phishing patterns targeting cryptocurrency enthusiasts. Analysis indicates gro90p.com is flagged by 6 out of 95 security vendors on VirusTotal, with one appearance on a security blocklist. The domain was registered on March 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3 and employs technologies such as WordPress, MySQL, PHP, and Cloudflare, which are often leveraged to obscure malicious activity. The domain’s Gridinsoft trust score of 0/100 further corroborates its malicious classification. Users who visited gro90p.com or interacted with its content should immediately cease all communication with the site and revoke any connected wallet permissions. Any funds transferred to addresses associated with this domain are likely compromised. Affected individuals should monitor their cryptocurrency wallets for unauthorized transactions, report the incident to relevant financial or cybersecurity authorities, and consider resetting credentials for any accounts linked to the interaction. Infrastructure analysis reveals the domain is currently offline, but similar threats may reemerge under different names.