# slon13cc.com — SUSPICIOUS

> slon13cc.com is an active medium-risk phishing domain. Stay alert and learn how to protect yourself from potential scams linked to this site.

## Summary
PhishDestroy identifies slon13cc.com as a medium-risk generic phishing domain actively posing threats to users. Phishing attacks can lead to credential theft and financial loss, making vigilance essential.

The domain was created recently and is registered via NiceNIC International Group Co., Limited. It resolves to IP 188.114.96.3 and appears on one security blocklist. VirusTotal analysis shows limited detection, but the domain remains active and suspicious.

Users are advised to avoid interacting with slon13cc.com, refrain from submitting personal information, and ensure their security software is up to date. Report any suspicious encounters to help mitigate risks associated with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: slon13.cc

## Domain Intelligence
- Registered: 2026-03-13 03:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: blair.ns.cloudflare.com lochlan.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["alphaMountain.ai", "Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce540-dbb2-731b-a524-828d6755c430.png
- PhishDestroy: https://phishdestroy.io/domain/slon13cc.com/
- LLM endpoint: https://phishdestroy.io/domain/slon13cc.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon13cc.com/
Last updated: 2026-03-19