# slon--2.ru — SUSPICIOUS

> PhishDestroy identifies slon--2.ru as a live phishing site (0/95 detections). Created Feb 19 2026 via RU-CENTER-RU; avoid this credential-stealing trap.

## Summary
PhishDestroy identifies slon--2.ru as an active phishing domain designed to steal login credentials and personal data from unsuspecting visitors.  This domain poses a clear credential-harvesting threat: it mimics legitimate services to trick users into entering passwords or financial details. Security analysts tracked the domain back to its registration on February 19, 2026 through RU-CENTER-RU, the official registrar for .ru domains. VirusTotal currently shows zero detections out of 95 scanners, indicating this malicious site has evaded detection by major antivirus engines as of the latest scan. Its SSL certificate from Let’s Encrypt is misleadingly used to appear legitimate, while the backend server at 188.114.96.3 hosts the fraudulent content.  Risk assessment remains under investigation, but early indicators suggest a targeted campaign, possibly leveraging newly registered domains that fly under the radar. The combination of fresh registration, low detection rates, and active phishing infrastructure indicates elevated risk for visitors who may encounter it through email links, social media ads, or spoofed login pages.  If you visited slon--2.ru, immediately run a full antivirus scan on your device. Do not enter any login credentials or personal information on the site. Change passwords for any accounts that may have been reused elsewhere, especially if you entered them while on this domain. Report the site to your email provider, browser vendor, and local cybercrime units using the URL and IP (188.114.96.3). Block the domain at your network level if possible — many security tools allow domain-level blocking via firewall or DNS filtering. Monitor financial accounts and credit reports for unusual activity, as compromised credentials could lead to identity theft or fraudulent transactions.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-19 17:33:26
- Registrar: RU-CENTER-RU
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/050cc772-8827-4566-9c9d-b7e70c28739b
- PhishDestroy: https://phishdestroy.io/domain/slon--2.ru/
- LLM endpoint: https://phishdestroy.io/domain/slon--2.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon--2.ru/
Last updated: 2026-03-28