# slon4t.cc — SUSPICIOUS

> PhishDestroy flags slon4t.cc as a crypto drainer phishing site with 0/95 VirusTotal detections. Users risk cryptocurrency theft if they interact with this.

## Summary
PhishDestroy identifies slon4t.cc as a suspicious website posing a **crypto drainer** threat, designed to trick users into unknowingly transferring cryptocurrency to attacker-controlled wallets. This domain employs deceptive tactics such as fake giveaways, counterfeit investment platforms, or fraudulent wallet integrations to siphon funds from unsuspecting victims. The site mimics legitimate crypto services to exploit user trust and bypass security measures, making it a high-risk destination for cryptocurrency holders. Users who engage with slon4t.cc may experience silent fund drains, irreversible transactions, or the compromise of wallet credentials.  This domain exhibits multiple red flags confirming its malicious intent. slon4t.cc was registered on February 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for anonymizing registrant details—often a tactic used by cybercriminals to evade detection. VirusTotal scans currently show 0 detections out of 95 engines, indicating it remains under the radar but is actively monitored for malicious behavior. Additionally, the domain resolves to IP 188.114.96.3, an address linked to numerous phishing campaigns and crypto-related fraud. The absence of blocklist entries at this stage does not imply safety; rather, it suggests the domain is newly active and rapidly evolving to avoid detection.  If you have visited slon4t.cc, immediately disconnect from the internet, scan your devices for malware using reputable antivirus software, and revoke any wallet access permissions granted to the site. Do not interact with pop-ups, wallet connection prompts, or transaction requests from this domain. Report the domain to your wallet provider or platform support team and consider rotating all associated cryptocurrency keys or addresses. Stay vigilant for unusual transaction history and enable multi-factor authentication where possible. Always verify website URLs, SSL certificates (especially for crypto services), and cross-check domains against known phishing databases before engaging. When in doubt, avoid the site entirely and seek assistance from trusted cybersecurity resources.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-23 09:51:46
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3a3d3175-61b7-41f7-98d3-56849fc1c914
- PhishDestroy: https://phishdestroy.io/domain/slon4t.cc/
- LLM endpoint: https://phishdestroy.io/domain/slon4t.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon4t.cc/
Last updated: 2026-03-31