slimclub[.]shop

The domain slimclub.shop is currently associated with credential theft phishing activity. Analysis indicates this site is being used in campaigns designed to harvest user credentials, though no specific brand impersonation or crypto drainer kit has been conclusively identified from the available evidence. The website's page title is simply 'slim,' and no clear branding is present. The domain remains active and presents a high risk for credential compromise.

Technical indicators confirm the threat. VirusTotal reports 2 out of 95 security vendors flagging slimclub.shop for malicious activity, signaling emerging detection. The domain resolves to IP address 104.18.213.228. It utilizes an SSL certificate issued by Google Trust Services, which does not in itself guarantee legitimacy. There is no documented registrar or creation date information provided in the current dataset. No Google Safe Browsing block or multiple industry blocklist inclusions have been reported as of this analysis, but the low number of detection vendors suggests the campaign may be relatively new or under active development.

slimclub.shop is confirmed to be live and serving content at the time of this report. Users are strongly advised to avoid any interaction with this domain, particularly avoiding the submission of credentials or personal data. Immediate response actions should include updating security blocklists to include slimclub.shop, alerting end users and security teams, and monitoring for related domains using similar infrastructure or content. The low detection rate on public scanners indicates ongoing risk and potential for further malicious activity. Continued monitoring and defensive measures are recommended.