# slokn5.cc — SUSPICIOUS

> PhishDestroy identifies slokn5.cc as a fake-giveaway phishing domain. Resolves to 141.98.234.104, created Feb 19 2026, 0/95 VirusTotal detections so far.

## Summary
PhishDestroy identifies slokn5.cc as a fake-giveaway phishing domain currently under active investigation. This domain is being used to impersonate legitimate sweepstakes and prize-claim portals, tricking visitors into submitting personal information or payment details under the guise of claiming a nonexistent reward. The site’s low detection footprint and recent registration timeline make it a fast-moving threat that can bypass traditional blacklists during its initial deployment phase. Users who encounter slokn5.cc should treat it as hostile and avoid interaction.  

This domain was flagged by PhishDestroy with a specific fake-giveaway phishing designation. Technical indicators include resolution to IP address 141.98.234.104, a Let’s Encrypt SSL certificate for obfuscation, and zero detections out of 95 VirusTotal engines as of the latest scan. The domain was registered on February 19, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with short-lived malicious domains. The fresh creation date and low detection rate suggest this site is in the early stages of its campaign lifecycle, maximizing its window of opportunity before automated defenses catch up. The absence of detections on VirusTotal indicates that traditional scanning layers have not yet flagged the payload, increasing the risk of successful exploitation.  

If you visited slokn5.cc, assume your device may have interacted with malicious JavaScript or form inputs designed to harvest credentials or install tracking code. Do not enter any personal, financial, or login details on this domain. Immediately run a full antivirus scan using a reputable security suite such as Malwarebytes, Kaspersky, or Windows Defender with real-time protection enabled. Clear browser cache and cookies for slokn5.cc to remove session tokens. If you provided sensitive data, change passwords on other accounts using unique credentials, enable two-factor authentication, and monitor financial statements for unauthorized transactions. Report the domain to your browser’s safe-browsing program and to PhishDestroy using seed 9c6fa3 to aid ongoing takedown efforts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-19 11:21:21
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 141.98.234.104

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/021b1d32-6740-422d-b2a3-346bb82ade25
- PhishDestroy: https://phishdestroy.io/domain/slokn5.cc/
- LLM endpoint: https://phishdestroy.io/domain/slokn5.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slokn5.cc/
Last updated: 2026-03-28