slurmitcoin[.]lat

slurmitcoin.lat was registered on 27 February 2026 through PublicDomainRegistry.com and is hosted behind Cloudflare (AS13335). The domain resolves to 172.67.193.254, uses Cloudflare Browser Insights and HTTP/3, and presents a Let’s Encrypt TLS certificate (identifier E8). HTTP responses return a 403 status and the page title is “Just a moment…”, suggesting a challenge page rather than visible content. The domain appears on three public blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. Open Threat Exchange references include 23 separate pulses, and Gridinsoft assigns a trust score of 0 / 100. VirusTotal reports 8 of 93 scanning engines flagging the domain as malicious. The infrastructure pattern matches short‑lived phishing operations that exploit Cloudflare’s CDN to hide origin servers. No further details about the landing page or targeted brand are presently available. Defenders should add the domain to DNS and URL filtering rules, monitor for additional resolutions to the same IP, and correlate logs for inbound connections that receive the 403 challenge. Ongoing re‑scanning with multi‑engine platforms is recommended to detect any changes in the payload or behavior.