# slon-3-at.ru — SUSPICIOUS

> Beware: slon-3-at.ru is a crypto drainer impersonating a login portal. Flagged by 0/95 VirusTotal vendors, verify on PhishDestroy before entering credentials.

## Summary
PhishDestroy identifies slon-3-at.ru as an active crypto drainer camouflaged as a login page, currently under investigation as a generic phishing threat. This domain, registered through REGRU-RU and secured with a Let's Encrypt SSL certificate, resolves to IP 205.185.113.136 and was created on February 28, 2026. VirusTotal currently reports 0 detections out of 95 vendors, indicating no immediate blacklisting despite active malicious activity.    Flagged by 0 of 95 VirusTotal vendors, slon-3-at.ru was registered via REGRU-RU, resolves to IP 205.185.113.136, and was created on February 28, 2026. No blocklist entries or trust score data are currently available for this domain, leaving users exposed to potential credential theft or cryptocurrency draining via fake login interfaces.    This domain remains active and poses a direct risk to users entering sensitive information. PhishDestroy recommends immediate verification of slon-3-at.ru and avoidance of any login attempts. Users should report this domain through PhishDestroy’s platform and update firewall/blocklist rules to prevent access. Exercise extreme caution with any unsolicited links or pages resembling this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-28 01:48:20
- Registrar: REGRU-RU
- IP: 205.185.113.136

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0aa9da17-3a90-445b-928e-ce6abb6fe98a
- PhishDestroy: https://phishdestroy.io/domain/slon-3-at.ru/
- LLM endpoint: https://phishdestroy.io/domain/slon-3-at.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon-3-at.ru/
Last updated: 2026-03-28