Is gro31q.com safe?
http://gro31q.com/
Coveragestrong3 of 4 applicable core capabilities
Fake 'GROK Token' presale flagged as a crypto phishing scam
gro31q.com presents itself as the 'Official Presale' for a GROK token and pushes visitors to 'JOIN PRESALE'. Independent research identifies it as part of an active phishing campaign and a growing network of fake Grok and SpaceX token presales, and three antivirus families flag it. The domain is only 159 days old and the hosting IP carries a high abuse score. This is a crypto fraud operation, not a legitimate token sale.
Be the first to review gro31q.com
Lost money to gro31q.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
gro31q.com presents itself as the 'Official Presale' for a GROK token and pushes visitors to 'JOIN PRESALE'. Independent research identifies it as part of an active phishing campaign and a growing network of fake Grok and SpaceX token presales, and three antivirus families flag it. The domain is only 159 days old and the hosting IP carries a high abuse score. This is a crypto fraud operation, not a legitimate token sale.
Borrowed AI branding to sell a fake token
The page headline reads 'The GROK Token Official Presale is now Live', using the GROK name associated with xAI to imply an official product. The site's 'About Us' and 'Term of Services' links point to MT Intelligence, borrowing the real company's domain to appear legitimate.
Independent research describes gro31q.com as part of an active phishing campaign targeting cryptocurrency users through a fraudulent token presale, and as part of a growing network of fake Grok and SpaceX token presales.
Where the money is meant to go
The main call to action is a 'JOIN PRESALE' button that sends visitors to an external domain, grokai-network.net, to complete a cryptocurrency transaction. The contact section instead points to grok888x.com and an email address on xaistrat.com, so the site's own pages scatter visitors across unrelated domains.
The hosting IP has an abuse confidence score of 74/100 across 64 saved reports, and three independent antivirus families returned an adverse result for the domain. The domain itself is only 159 days old.
Clean encryption does not make the operator trustworthy
The saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning. Those are technical checks only; they show the connection is encrypted and that one blocklist had no current entry, not that the site is honest.
The operator-level evidence is the decisive part: independent research identifies an active phishing campaign and a fake token presale network, and the site's own pages use the GROK name and MT Intelligence links to create a false sense of legitimacy.
Why the score is 12
The page advertises an 'Official Presale' for a GROK token, a pattern identified in research as a fake AI token presale scam. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
4/ 92
detectionsSaved analysis from October 2, 2026 - stale
4 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 3
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| Chong Lua DaoMalicious | malicious |
| Forcepoint ThreatSeekerMalicious | phishing |
| GridinsoftSuspicious | suspicious |
All 92 engine results
- alphaMountain.ai - phishing - Malicious
- Chong Lua Dao - Malicious
- Forcepoint ThreatSeeker - phishing - Malicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Unrated
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual warning signs were identified
The GROK Token Official Presale is now Live
What the captured page showed
1 observation- 01
The GROK Token Official Presale is now Live
03 · Investigation Story
Investigation story
What the site claims
GRO31Q Official Website Presale (up to 200% bonus)
What we observed
The page content was captured and checked alongside 59 antivirus results.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Investment, Crypto & Wallet Fraud
Service and business model
Financial Service
Observed behavior
Evidence behind this classification
- 01The page advertises an 'Official Presale' for a GROK token, a pattern identified in research as a fake AI token presale scam.
- 022 independent sources carry complaints or warnings about this site, including: "Analysis of the domain gro31q[.]com indicates an active phishing campaign targeting cryptocurrency users through a fraudulent token presale."
- 032 independent sources carry complaints or warnings about this site, including: "Fake Grok and SpaceX Token Presales: Inside a Growing Crypto Scam Network"
Web research findings
Independent findings for gro31q.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domaingro31q.com
- Redirects togro31q.com
- Hosted byAmazon.com, Inc.
- Referencesfonts.googleapis.com · fonts.gstatic.com
Domain Timeline
- May 16, 2026Domain registered
First appeared in WHOIS records — 5 months old when this review was saved.
- Oct 23, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
gro31q.com was registered very recently when this review was saved and was already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Redirect Chain
- 1301http://gro31q.com/
- 2206https://gro31q.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
The hosting IP has an abuse confidence score of 74/100 across 64 saved reports. · 3 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The page advertises an 'Official Presale' for a GROK token, a pattern identified in research as a fake AI token presale scam. · 2 independent sources carry complaints or warnings about this site, including: "Analysis of the domain gro31q[.]com indicates an active phishing campaign targeting cryptocurrency users through a fraudulent token presale."
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 4 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Oct 2, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | Adverse | this scan · Oct 23, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 23, 2026 |
- Antivirus
- Result4 of 92 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 2, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 23, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 23, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is gro31q.com a scam or a legit crypto platform?
Is gro31q.com safe to use?
What should I do if I already sent funds to gro31q.com?
Can I get my money back from gro31q.com?
Is gro31q.com a Ponzi scheme or a real crypto investment?
How do I report gro31q.com?
Why does gro31q.com look legitimate if it's a scam?
Has gro31q.com been flagged by antivirus engines?
Is gro31q.com on any phishing or malware blacklists?
How old is the gro31q.com domain?
Where is gro31q.com hosted?
How often is the gro31q.com report updated?
08 · Final Verdict
Final verdict
Fake 'GROK Token' presale flagged as a crypto phishing scam
gro31q.com presents itself as the 'Official Presale' for a GROK token and pushes visitors to 'JOIN PRESALE'. Independent research identifies it as part of an active phishing campaign and a growing network of fake Grok and SpaceX token presales, and three antivirus families flag it. The domain is only 159 days old and the hosting IP carries a high abuse score. This is a crypto fraud operation, not a legitimate token sale.
09 · Community