slodoxcs[.]top

PhishDestroy identifies slodoxcs.top as a generic phishing domain posing as a login portal to harvest user credentials. The threat involves deceptive pages mimicking trusted services to capture login details, financial data, or personal information. This domain was flagged as active under investigation with a high-risk profile due to its recent creation and lack of detection coverage. This domain was registered on March 31, 2026, through NameSilo, LLC, and resolves to IP address 104.21.21.76. It utilizes a Let’s Encrypt SSL certificate to appear legitimate, though its recent registration (within days of discovery) raises immediate suspicion. Currently, VirusTotal reports 2 out of 95 detections, indicating it has not yet been widely flagged by security vendors. As of this analysis, there are no confirmed entries on major blocklists or reputation databases, suggesting rapid deployment with minimal prior exposure. The combination of a new domain, low detection rates, and a generic phishing profile places users at risk of credential theft or account compromise. To mitigate risk, users should avoid accessing slodoxcs.top entirely. Organizations and individuals should block the domain at the network and DNS levels using the seed identifier 22aaa3. If credentials were entered, immediately reset passwords on all related accounts and enable multi-factor authentication. Monitor accounts for unusual activity and report the domain to security teams or platforms like PhishDestroy for further analysis. Exercise caution with any unsolicited login prompts and verify URLs through official channels before submission.