# slon5-cc.at — MALICIOUS

> Discover the potential risks associated with slon5-cc.at, a domain under investigation for phishing activity. Stay informed and cautious.

## Summary
PhishDestroy has classified slon5-cc.at as an active domain suspected of generic phishing activities, currently under investigation. While the risk level remains tentative, the domain exhibits characteristics that warrant closer scrutiny to protect users from potential credential theft or fraud.

This domain resolves to the IP address 104.21.59.11 and is registered through Dynadot LLC, a registrar sometimes used by malicious actors. Despite a clean VirusTotal scan with zero detections from 95 security vendors, the domain's sudden emergence and associated infrastructure raise concerns. The lack of positive detections suggests it may be newly deployed or employing evasion tactics, emphasizing the need for vigilance.

Users and network defenders should monitor slon5-cc.at closely, avoid interacting with suspicious links or emails referencing this domain, and employ phishing protection mechanisms. PhishDestroy continues to track its status as investigations progress, advising caution until a definitive risk assessment can be concluded.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Kraken сайт безопасный market tor onion для анонимных покупок

## Domain Intelligence
- Registrar: Dynadot LLC
- Country: US
- IP: 104.21.59.11
- Nameservers: amos.ns.cloudflare.com kay.ns.cloudflare.com

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/7tTbkh0w/ba595bcd5f46.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/1b7772d2-20a3-4131-b9ed-cadf5761be37
- PhishDestroy: https://phishdestroy.io/domain/slon5-cc.at/
- LLM endpoint: https://phishdestroy.io/domain/slon5-cc.at/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon5-cc.at/
Last updated: 2026-03-19