# slon2--c---c.ru — SUSPICIOUS

> Slon2--c---c.ru linked to active PayPal credential phishing. Flagged by 0 of 95 VirusTotal scanners. Check the full report.

## Summary
PhishDestroy identifies slon2--c---c.ru as an active PayPal credential phishing site under investigation.


This domain was flagged by 0 of 95 VirusTotal security vendors as of the latest scan, indicating unrecognized malicious content. It is registered through REGRU-RU, resolves to IP address 198.13.158.7, and was created on March 11, 2026. The domain holds a valid Let's Encrypt SSL certificate and currently remains unlisted on major threat blocklists, with no trust score reductions reported across monitoring platforms.


The domain is flagged as an active PayPal credential phishing threat targeting unsuspecting users with fraudulent login pages. While detection coverage is currently low, the threat remains active and accessible. It is strongly recommended to block slon2--c---c.ru at the network level (DNS, firewall) and avoid visiting the site. Organizations should update browser blocklists and security filters to preemptively block this domain based on observed behavior. Users are advised to verify URLs carefully, never input sensitive data on unfamiliar sites, and report suspected phishing attempts to their security teams or platform providers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-11 15:02:48
- Registrar: REGRU-RU
- IP: 198.13.158.7

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ea6e2221-be5f-4a71-b93e-c6bf30ceb342
- PhishDestroy: https://phishdestroy.io/domain/slon2--c---c.ru/
- LLM endpoint: https://phishdestroy.io/domain/slon2--c---c.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon2--c---c.ru/
Last updated: 2026-03-24