# 5-slon5cc.ru — SUSPICIOUS

> 5-slon5cc.ru is linked to credential theft with 0/95 VirusTotal detections; domain created Mar 22, 2026. Users should exercise caution and avoid interaction.

## Summary
The domain 5-slon5cc.ru is actively involved in a credential theft campaign, aiming to harvest sensitive user login information through deceptive means. This specific threat type targets users by impersonating legitimate services or creating fraudulent login portals designed to capture credentials.

Analysis indicates that 5-slon5cc.ru was registered on March 22, 2026, through the REGRU-RU registrar. While VirusTotal currently reports 0 out of 95 detections, the domain uses an SSL certificate issued by Let's Encrypt and resolves to the IP address 209.141.42.45. The domain remains active and is still under investigation, with no current blocklist counts reported.

Users who have visited 5-slon5cc.ru should remain vigilant and avoid entering any personal or login information on this domain. It is recommended to immediately change any credentials that might have been submitted, enable multifactor authentication where possible, and monitor accounts for unauthorized activity to mitigate any potential compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-22 05:43:17
- Registrar: REGRU-RU
- IP: 209.141.42.45

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ccb9d314-49e5-46bb-898a-26ab7d0c04b1
- PhishDestroy: https://phishdestroy.io/domain/5-slon5cc.ru/
- LLM endpoint: https://phishdestroy.io/domain/5-slon5cc.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/5-slon5cc.ru/
Last updated: 2026-03-28