slope-slope-www[.]pages[.]dev

This domain is flagged as a crypto drainer targeting users of Slope Finance, a decentralized finance platform. The site mimics legitimate Slope Finance interfaces to trick visitors into connecting wallets, which may result in unauthorized token transfers or complete asset drainage. Analysis indicates the domain employs social engineering tactics, including a cloned interface and urgent transaction prompts, to exploit victims before detection. Infrastructure analysis reveals the domain was registered on April 30, 2026, through Cloudflare, Inc., and currently resolves to IP 172.66.44.109. Despite its recent creation, the domain appears on only one security blocklist, with VirusTotal showing 0/95 detections as of the latest scan. The SSL certificate is issued by Google Trust Services (WE1), and the hosting IP is geolocated to California, consistent with Cloudflare’s infrastructure. These indicators suggest an attempt to evade detection by leveraging reputable service providers. Users who visited slope-slope-www.pages.dev should immediately disconnect any connected wallets and revoke permissions via their wallet’s dApp browser or blockchain explorers. Monitor transaction history for unauthorized activity and consider transferring assets to a new wallet if suspicious interactions are detected. Report the domain to security teams or blocklist providers to aid in broader mitigation efforts. Avoid re-engaging with the site or any linked resources to prevent further compromise.