# at-slon8.cc — SUSPICIOUS

> at-slon8.cc is a crypto drainer site detected by 3/95 VirusTotal scanners. It impersonates legitimate crypto services to steal digital assets. Avoid interaction.

## Summary
PhishDestroy identifies at-slon8.cc as an active crypto drainer designed to trick users into connecting crypto wallets or entering seed phrases. The site mimics real crypto platforms, luring victims with false investment opportunities, airdrops, or wallet authentication pages. Once connected, it drains tokens directly from the victim's wallet without requiring additional permissions.  This domain was flagged by PhishDestroy after VirusTotal analysis detected 3 out of 95 security vendors identifying it as malicious. Intelligence shows the domain was created on February 18, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 104.21.77.66 and uses a Let’s Encrypt SSL certificate to appear legitimate.  If you visited at-slon8.cc, disconnect your wallet immediately, revoke any unauthorized connections via your wallet’s settings, and transfer remaining funds to a new wallet. Run a malware scan on your device and monitor for unauthorized transactions. Report the domain to your wallet provider and relevant cybersecurity platforms to help block further abuse.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-18 22:01:45
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.77.66

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/754f57db-7dff-42fe-8bfa-490ab79006d4
- PhishDestroy: https://phishdestroy.io/domain/at-slon8.cc/
- LLM endpoint: https://phishdestroy.io/domain/at-slon8.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/at-slon8.cc/
Last updated: 2026-03-28