access-aerodrome-slipstream[.]pages[.]dev

This domain, access-aerodrome-slipstream.pages.dev, is identified as an active credential harvesting phishing site targeting users of the Aerodrome Slipstream platform. The page impersonates legitimate documentation with the title 'Aerodrome Slipstream — Overview, Mechanics & Use Cases,' designed to deceive victims into submitting sensitive authentication credentials. Analysis indicates the site employs social engineering tactics, leveraging a seemingly technical overview to lower user vigilance and extract login details for subsequent unauthorized access to financial or cryptocurrency accounts. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on April 10, 2026, and resolves to the IP address 188.114.96.3, associated with Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic of phishing sites exploiting trusted certificate authorities to appear legitimate. Detection metrics show the domain is flagged by 1 out of 95 security vendors on VirusTotal and appears on a single security blocklist, indicating limited but present awareness of its malicious nature. The domain remains active as of this report, posing an ongoing threat. Users who have visited access-aerodrome-slipstream.pages.dev or interacted with its content should immediately revoke any entered credentials, particularly those associated with financial or cryptocurrency platforms. It is recommended to monitor accounts for unauthorized transactions and enable multi-factor authentication where available. System administrators should update network security policies to block the domain and its resolving IP address, 188.114.96.3, to prevent further exposure. Affected individuals are advised to conduct a full security review of connected devices to ensure no additional compromise has occurred.