slerf-cjl[.]pages[.]dev

PhishDestroy identifies slerf-cjl.pages.dev as an active crypto drainer phishing domain under investigation for malicious activity targeting cryptocurrency users. The domain leverages deceptive tactics to trick victims into connecting wallets or authorizing fraudulent transactions, resulting in unauthorized asset transfers. Security researchers strongly advise against visiting or engaging with this domain until further analysis confirms its disposition.

This domain was flagged after appearing on 2 security blocklists, including ScamSniffer and Enkrypt, with 0 detections on VirusTotal (6/95 engines). It is registered through Cloudflare, Inc. and resolves to IP 188.114.96.3, operated under Google Trust Services SSL certification. The infrastructure’s association with Cloudflare and Google Trust Services highlights the sophistication of the threat actor’s evasion techniques, requiring advanced detection methods to identify and mitigate risks promptly.

Users who visited slerf-cjl.pages.dev should immediately disconnect any connected wallets, revoke unauthorized permissions via blockchain explorers, and scan their devices for malware. If funds were stolen, report the incident to local law enforcement and file a complaint with relevant cybercrime units. Remain vigilant for follow-up phishing attempts and avoid interacting with suspicious links or domains in the future.