slerf-wtf-en[.]pages[.]dev

PhishDestroy identifies slerf-wtf-en.pages.dev as an active crypto drainer phishing domain posing as a legitimate service. The site leverages Cloudflare Pages to host a fraudulent interface, likely targeting cryptocurrency users with fake transaction prompts. No specific brand or drainer kit signature has been publicly associated with this domain at this time, but its infrastructure and delivery method align with known crypto theft campaigns.

This domain resolves to IP address 188.114.97.3 and was registered through Cloudflare, Inc. It carries a VirusTotal detection score of 1/95 security vendors as of the latest scan, suggesting low but present malicious intent. The site holds a valid SSL certificate issued by Google Trust Services, which may enhance its credibility in phishing lures. No creation date is publicly available for this domain, and it does not appear on major blocklists as of current data.

slerf-wtf-en.pages.dev remains active and poses an elevated risk to visitors. Users are advised to avoid interacting with this domain and report any encounters. Security teams should block the domain and IP (188.114.97.3) at the network perimeter. While the current risk is elevated due to active hosting and phishing intent, the low VT detection rate indicates possible evasion techniques. Remain vigilant for updates as additional IOCs may emerge. 99bc40