# slon4.shop — SUSPICIOUS

> Warning: slon4.shop is linked to generic phishing attempts. Exercise caution and avoid sharing personal info on this domain.

## Summary
PhishDestroy identifies slon4.shop as a generic phishing domain, created recently on February 21, 2026. The domain is classified as low risk but remains active in deceptive activities.

Technical analysis shows the domain resolves to IP 172.67.150.132 and is registered via NiceNIC International Group Co., Limited. VirusTotal flags are minimal with only 2 out of 95 security vendors detecting suspicious behavior, indicating limited but present threat indicators.

Currently, slon4.shop remains active and should be treated with caution. Users are advised to avoid interacting with this domain or submitting any sensitive information. Continuous monitoring is recommended to track any changes in its threat profile.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Page Not Found — 404

## Domain Intelligence
- Registered: 2026-02-21 20:06:58
- Registrar: NiceNIC International Group Co., Limited
- Country: CN
- IP: 172.67.150.132
- Nameservers: dante.ns.cloudflare.com mckinley.ns.cloudflare.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Bfore.Ai PreCrime", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/xq0gXP5c/ffd32f461b77.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e5d756e8-9fdc-4837-a8d2-0fa9bcd0bc53
- PhishDestroy: https://phishdestroy.io/domain/slon4.shop/
- LLM endpoint: https://phishdestroy.io/domain/slon4.shop/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon4.shop/
Last updated: 2026-03-19