aerodrome-slipstream[.]pages[.]dev

The domain aerodrome-slipstream.pages.dev was a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It did not impersonate a specific brand or use a known crypto drainer kit. As of the latest verification, aerodrome-slipstream.pages.dev has been taken offline, but its prior activity posed an elevated risk to visitors.

Technical indicators for aerodrome-slipstream.pages.dev include 1 of 95 VirusTotal security vendors flagging the domain, specifically Trustwave. The domain was registered through Cloudflare, Inc. on February 21, 2026, and resolved to the IP address 172.66.45.10, hosted by Cloudflare, Inc. in the US. It appeared on 1 security blocklist, PhishDestroy, and was not flagged by Google Safe Browsing. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Worker threw exception | aerodrome-slipstream.pages.dev | Cloudflare'. The site employed technologies such as HSTS, Cloudflare, and HTTP/3, with nameservers daisy.ns.cloudflare.com and moura.ns.cloudflare.com.

Users who may have interacted with aerodrome-slipstream.pages.dev should immediately change any credentials entered on the site and enable two-factor authentication on affected accounts. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions or identity protection services. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If crypto assets were involved, revoke any token approvals granted to unknown contracts and consider moving funds to a new wallet.