register-slurmit[.]fun

The domain register-slurmit.fun was registered on March 04, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare address 104.21.1.127, ASN 13335, located in the United States. The authoritative name servers are porter.ns.cloudflare.com and priscilla.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. No TLS certificate was observed, so the site served HTTP without encryption. The only visible page title is "Error", and no additional content has been captured, leaving the exact phishing payload or targeted brand undefined.

The domain appears on three security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple threat‑intelligence providers have flagged it as malicious. VirusTotal analysis returned a single positive detection out of ninety‑five scanners, providing further independent corroboration of its malicious nature. Current monitoring shows the site is offline, but the infrastructure components remain in place and could be re‑activated.

Defenders should immediately add register‑slurmit.fun to DNS and proxy deny lists, enforce TLS inspection to capture any future traffic, and monitor Cloudflare IP ranges for similar activity. Continuous watch of the associated ASN and the registrar’s new registrations is advised to detect potential resurgence or related domains. Because the page content has not been harvested, analysts should treat any future re‑appearance as a potential phishing landing page and apply standard credential‑harvesting mitigations until the threat is fully characterized.