# slon.uk — SUSPICIOUS

> slon.uk is a confirmed PayPal phishing site (0/95 VirusTotal detections), registered January 2021. Check the full report for detailed safety steps.

## Summary
PhishDestroy identifies slon.uk as an active phishing domain designed to impersonate PayPal login pages. This site attempts to trick visitors into entering sensitive credentials by mimicking a legitimate financial service portal. The domain's infrastructure and recent activity suggest it is part of a larger campaign targeting unsuspecting users.  

This domain was flagged with *0 out of 95 VirusTotal detections* at the time of assessment, meaning antivirus engines have not yet blacklisted it despite clear phishing indicators. It was registered on January 9, 2021, through names.co.uk, a UK-based registrar known for hosting various online services. The domain resolves to IP address 62.133.28.132 and uses a valid SSL certificate issued by Let's Encrypt, which may give visitors a false sense of security.  

If you have visited slon.uk, cease any interaction immediately. Do not enter personal information such as login credentials, payment details, or sensitive data. Run a full antivirus scan on your device. Check if your PayPal (or other affected service) account credentials were used there and enable two-factor authentication. Report suspicious emails or links to the legitimate PayPal support channels. Avoid interacting with this domain further and warn others who may have encountered it.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2021-01-09 00:00:00
- Registrar: Team Blue Internet Services UK Limited t/a Team Blue Internet Services Limited t/a names.co.uk [Tag = NAMESCO]
- IP: 62.133.28.132

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2bfa5a01-73ad-4f00-b1d8-9e28c87eed3d
- PhishDestroy: https://phishdestroy.io/domain/slon.uk/
- LLM endpoint: https://phishdestroy.io/domain/slon.uk/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon.uk/
Last updated: 2026-03-28