slogem[.]com

Analysis indicates that slogem.com was registered on 2026-03-04 through Gname.com Pte. Ltd. and is currently active. The site presents the page title “SLOGEM” and serves content over HTTPS with a certificate issued by a free authority (E8). DNS resolution points to 104.21.65.245, an address hosted in the United States and associated with a large content‑delivery network. Infrastructure fingerprints reveal the use of a modern client‑side framework and asynchronous request handling, suggesting a dynamic web application. Google’s safety service has classified the domain as social‑engineering, and it appears on three public blocklists. Additional security extensions have blocked access, and three of ninety‑five scanners on a malware aggregation platform reported detections. The domain is listed with nameservers ns1.fbi.seized.gov and ns2.fbi.seized.gov. The threat is identified as a crypto‑drainer campaign, targeting users who interact with the site to illicitly transfer cryptocurrency assets. While the exact page content has not been examined, the combination of recent registration, active status, high‑risk rating, and multiple external detections warrants immediate mitigation. Defenders should block the domain at DNS and proxy layers, monitor outbound requests to the resolved IP, and update intrusion‑detection signatures to include the observed TLS fingerprint and HTTP response code. Continuous observation is advised to capture any evolution of the payload.