# captcha-slon4-at.ru — SUSPICIOUS

> Explore if captcha-slon4-at.ru poses a phishing threat. Learn about its risk level, domain details, and current investigation status here.

## Summary
PhishDestroy identifies captcha-slon4-at.ru as an active phishing threat currently under investigation. The domain is associated with generic phishing activities, which suggests attempts to deceive users into divulging sensitive information. Due to its recent creation date and suspicious context, the risk level remains uncertain but warrants caution.

The domain captcha-slon4-at.ru was registered on March 16, 2026, through the REGRU-RU registrar and resolves to the IP address 205.185.113.136. Notably, VirusTotal scans have not detected any malware or phishing signatures linked to this domain, with zero detections from 95 security vendors. Despite this, the domain’s infrastructure and naming pattern align with common tactics used in phishing campaigns, justifying its ongoing scrutiny.

Users are advised to avoid interacting with captcha-slon4-at.ru until further analysis clarifies its intent. Organizations should monitor their security systems for any related phishing attempts and educate users on spotting suspicious domains. PhishDestroy continues to track the domain’s activity and will update its threat status as new intelligence becomes available.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: ÐÐ¾ÑÐµÐ¼Ñ Ð½Ð° https://slon4.at Ð½ÐµÐºÐ¾ÑÐ¾ÑÑÐµ ÑÐ·ÑÐºÐ¸ Ð¸ÑÑÐµÐ·Ð°ÑÑ ÐºÐ°Ð¶Ð´ÑÐµ 2 Ð½ÐµÐ´ÐµÐ»Ð¸

## Domain Intelligence
- Registered: 2026-03-16 01:08:12
- Registrar: REGRU-RU
- Country: RU
- IP: 205.185.113.136
- Nameservers: ns1.reg.ru ns1.reg.ru. ns2.reg.ru ns2.reg.ru.

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/zVRY5Dsd/2dc4d3f585e0.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e823adfe-6131-4fda-a632-065da13b896b
- PhishDestroy: https://phishdestroy.io/domain/captcha-slon4-at.ru/
- LLM endpoint: https://phishdestroy.io/domain/captcha-slon4-at.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/captcha-slon4-at.ru/
Last updated: 2026-03-19