# slon5.vip — SUSPICIOUS

> PhishDestroy identifies slon5.vip as a generic phishing domain created on March 17, 2026. It poses a risk of credential theft. Avoid interaction and report.

## Summary
PhishDestroy has flagged slon5.vip as an elevated-risk domain actively involved in generic phishing campaigns. This domain presents a significant threat of potential data theft and malware distribution.

Technical analysis reveals that slon5.vip was registered through Dynadot Inc and created on March 17, 2026. The domain resolves to the IP address 82.97.245.39 and uses an SSL certificate issued by Let's Encrypt. VirusTotal reports that 2 out of 95 security vendors have flagged this domain as malicious.

Given the active phishing status of slon5.vip, users are strongly advised to avoid visiting this domain or interacting with any content or communications originating from it. Any emails or messages received from this domain should be treated as suspicious and reported immediately to security teams. Implementing enhanced email filtering and endpoint protection measures can help mitigate the risk. Blocking the domain at the network level can prevent accidental access and reduce the likelihood of successful phishing attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-17 09:16:11
- Registrar: Dynadot Inc
- IP: 82.97.245.39

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/slon5.vip
- PhishDestroy: https://phishdestroy.io/domain/slon5.vip/
- LLM endpoint: https://phishdestroy.io/domain/slon5.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon5.vip/
Last updated: 2026-04-07