# sloan3.net — SUSPICIOUS

> sloan3.net is linked to medium-risk phishing activity. Avoid interacting with it and report suspicious emails referencing this domain.

## Summary
PhishDestroy identifies sloan3.net as an active generic phishing domain presenting a medium level of risk. The page titled "Один момент…" is used to deceive victims, potentially harvesting sensitive data.

The domain was registered recently on March 13, 2026, through NiceNIC International Group Co., Limited, and resolves to IP 198.13.158.7. It appears on one security blocklist, with three out of ninety-five VirusTotal scanners flagging it, underscoring its suspicious nature.

Currently, sloan3.net remains active and continues to pose a threat. Users should avoid visiting it or engaging with related communications. Organizations are advised to block this domain and update phishing filters accordingly to reduce exposure risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: Один момент…

## Domain Intelligence
- Registered: 2026-03-13 03:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 198.13.158.7
- IP Country: NL
- IP City: Amsterdam
- IP Org: AS399629 BL Networks
- Nameservers: elijah.ns.cloudflare.com emely.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce53f-0f5f-7738-9ce4-8f022fb8b600.png
- PhishDestroy: https://phishdestroy.io/domain/sloan3.net/
- LLM endpoint: https://phishdestroy.io/domain/sloan3.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sloan3.net/
Last updated: 2026-03-19