slon6cc[.]vip

PhishDestroy identifies slon6cc.vip as an active cryptocurrency investment scam masquerading as a legitimate exchange portal. This domain is engineered to deceive users into depositing funds or surrendering credentials by mimicking the branding of reputable crypto platforms. The landing pages typically include fraudulent ‘account verification’ prompts, fake ‘investment returns’, or spoofed KYC forms, all designed to harvest sensitive financial or personal data. Historical phishing campaigns linked to this infrastructure have primarily targeted novice traders with promises of guaranteed high-yield returns. Security teams should treat this domain as a high-priority threat due to its active operation and lack of detection on major scanning platforms.

This domain was flagged with zero detections on VirusTotal (3/95 engines) as of the latest scan, indicating it remains under the radar of most security vendors. It resolves to IP address 64.7.198.31 and uses a Let’s Encrypt SSL certificate to appear legitimate. The domain was registered on April 18, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for accommodating high-turnover disposable domains. The recent creation date and low detection rate suggest a newly deployed campaign with rapid evolution to evade defenses. Users should note the absence of reputation on threat intelligence platforms and the lack of community blocklist entries as red flags.

If you have visited slon6cc.vip, immediately cease any interaction with the site and disconnect from the network. Do not enter any login credentials, cryptocurrency wallet addresses, or financial information. Clear your browser cache and run a full antivirus scan. Report the domain to your IT security team and submit it to abuse channels for takedown. Monitor your financial accounts for unauthorized transactions and consider rotating passwords for crypto-related services. Always verify URLs through official sources before engaging with any financial portal.