slush-wallett-cdn[.]pages[.]dev

PhishDestroy has identified slush-wallett-cdn.pages.dev as an active brand impersonation phishing domain, specifically targeting Google users. The site presents itself as "Slush Wallet — The Modern Revolution in Digital Finance," a deceptive front designed to steal credentials or cryptocurrency from unsuspecting victims. This domain is part of a broader campaign leveraging trusted brand names to lure individuals into compromising their financial security.

Technical analysis reveals that the domain was registered through Cloudflare, Inc. on October 14, 2025, and resolves to IP address 172.66.47.55. VirusTotal scanning shows 12 out of 95 security vendors flagging this domain as malicious, and it appears on one security blocklist. Google Safe Browsing has explicitly flagged the site for phishing, and its SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of legitimacy. The domain was created relatively recently, indicating a fresh phishing campaign.

As of now, the domain remains active and continues to pose a significant risk to users. PhishDestroy recommends immediate blocking of this domain at network and email gateways. Users who have interacted with the site should change passwords, enable multi-factor authentication, and monitor accounts for unauthorized activity. Vigilance against unsolicited financial service offers is advised to prevent further compromise.