grokvarum.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of grokvarum.com
grokvarum.com appears to present itself as a cryptocurrency presale website for a token called "Grokvarum." The homepage screenshot shows a promotional landing page with calls to action such as "Buy Grokvarum" and "Read Documents," along with marketing claims including an "official presale" and bonuses of up to 200% tokens. The content and design suggest a crypto fundraising or token-sale campaign rather than a general informational website.
Based on the page title, metadata, and visible content, the site appears to target users interested in speculative digital-asset investments. It references GROK-branded platforms and uses countdown timers, token bonus messaging, and presale metrics to encourage participation. No clear evidence of a well-established operating company, regulated financial entity, or independently verifiable organization is visible from the provided scan data, so the operator remains unclear based on available information.
Safety Assessment for grokvarum.com
Several risk indicators were identified at the time of this scan. The domain was flagged by 14 out of 91 security engines, with multiple detections describing the site as phishing or otherwise malicious. In addition, the malware scan marked the main page and related pages as malicious and identified a flagged external reference to xaidash.app. The site is also categorized by multiple web-classification providers in phishing, fraud, or financial-risk related categories, which increases concern.
Contextual signals also add to the risk profile. The domain is very new at 38 days old, has no established popularity ranking, and promotes a cryptocurrency presale with unusually aggressive marketing language such as an "official presale" and bonuses of up to 200%. The screenshot shows urgency elements and investment-style claims that are commonly associated with high-risk crypto promotions. Although major blacklist databases included in this scan were clean at the time, blacklist status can lag behind newly deployed campaigns.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt SSL certificate, hosted on an Apache web server at IP address 91.92.240.105 in Frankfurt am Main, Germany, with hosting attributed to Omegatech LTD. The domain uses Cloudflare as registrar and nameservers, and the certificate validity indicates basic transport encryption was in place at the time of testing.
From a security posture perspective, the domain is very newly registered, DNSSEC appears to be unsigned, and the scan identified flagged content on multiple local pages as well as one flagged external domain reference. A valid SSL certificate only indicates encrypted transport and should not be treated as proof of legitimacy.
Share your experience with this website. Was it safe? Did you encounter any issues?