en-slush[.]app

The domain en-slush.app was identified as a phishing site engaged in brand impersonation, specifically targeting the 'across' brand. The site presented itself with the page title 'Slush Wallet | Unlock Fast, Secure Crypto Trading on Sui' and was flagged for seed phrase phishing, a tactic often used to compromise users' cryptocurrency wallets. As of now, en-slush.app is offline and no longer accessible, but users should be aware that it previously posed an elevated risk.

Technical analysis shows en-slush.app was detected by 8 of 95 security vendors on VirusTotal, including ADMINUSLabs, ChainPatrol, and CRDF. The domain was created on February 21, 2026, and resolved to IP address 172.67.158.139, located in the US under AS13335 (Cloudflare, Inc.). The SSL certificate was issued by WE1, and the domain used nameservers operated by Njalla. En-slush.app was listed on three security blocklists: PhishDestroy, MetaMask, and SEAL. Google Safe Browsing did not flag the domain, but Gridinsoft assigned it a trust score of 0/100.

Anyone who interacted with en-slush.app and entered a seed phrase or wallet credentials should immediately move their funds to a new wallet and revoke any token approvals that may have been granted. Users should also monitor their accounts for unauthorized activity. To help prevent further incidents, phishing domains like en-slush.app can be reported to relevant security organizations or blocklist maintainers.