# 5slon5-cc.ru — SUSPICIOUS

> 5slon5-cc.ru is an active generic phishing domain created on March 24, 2026. Users should avoid interaction due to ongoing risk assessment.

## Summary
5slon5-cc.ru has been identified as a generic phishing domain actively posing a potential threat to users. There is no specific brand or drainer kit linked to this domain at this stage, but its classification under phishing suggests attempts to deceive users into divulging sensitive information.

From a technical standpoint, 5slon5-cc.ru holds an SSL certificate issued by Let's Encrypt and resolves to the IP address 209.141.42.45. The domain was registered on March 24, 2026, through REGRU-RU. VirusTotal reports 0 detections out of 95 scans, indicating it has not yet been flagged by antivirus engines or blocklists. There is no current Google Safe Browsing status provided.

The domain remains active and under investigation, with the risk level not yet fully determined. Due to its phishing classification and active status, users are strongly advised to avoid visiting or interacting with 5slon5-cc.ru. Continuous monitoring and further analysis are recommended to validate the threat and update mitigation strategies accordingly.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 10:12:49
- Registrar: REGRU-RU
- IP: 209.141.42.45

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/665728aa-6500-4cff-990d-167003cba5e5
- PhishDestroy: https://phishdestroy.io/domain/5slon5-cc.ru/
- LLM endpoint: https://phishdestroy.io/domain/5slon5-cc.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/5slon5-cc.ru/
Last updated: 2026-03-28