MALICIOUS — CRITICAL
slon5.com: Confirmed Phishing Site
slon5[.]
The domain slon5.com currently carries an elevated risk level as an active generic phishing site.
- VirusTotal
- 5/92
- Blocklists
- No stored match
- Доступность
- Последний известный активный · HTTP 301
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
slon5.com — Последний известный активный (HTTP 301). Сводка доказательств: VirusTotal 5/92 (ADMINUSLabs, alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); Spamhaus DBL_PHISH; PhishDestroy score 83/100. Регистратор: NiceNIC.
Подробный анализ PhishDestroy AI ниже оставлен на английском, чтобы сохранить исходную криминалистическую запись.
Evidence Analysis
The domain slon5.com currently carries an elevated risk level as an active generic phishing site. This means it is designed to trick visitors into revealing sensitive information such as login credentials or financial details. Security professionals have identified it as a threat that should be avoided entirely.
PhishDestroy's investigation reveals several concrete indicators of risk. VirusTotal reports that 3 out of 95 security vendors flag this domain as malicious. AlienVault OTX includes it in one threat intelligence pulse, and it appears on one security blocklist. The domain was created on May 18, 2026, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to the IP address 188.114.97.3. Its SSL certificate is issued by Let's Encrypt (E7), which is common for both legitimate and malicious sites, so it should not be considered a sign of safety.
To protect yourself, never visit slon5.com or click any links pointing to it. If you have already accessed it, change any passwords entered and monitor your accounts for unauthorized activity. Report the domain to your email provider or security team to help block future threats. Enable phishing protection in your browser and consider using a reputable security solution that can detect malicious domains.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Охват данных12 recorded checks
Данные сетевой безопасности Registrar context
Процесс реагирования на угрозы
Статус в публичных блок-листах
Аналитика доменов
Технические сведенияDNS, SAN в протоколе SSL, временные метки
ICANN OVERSIGHT
Аккредитация и контекст RAA
Аккредитация и контекст RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:54:44 UTC
Анализ VirusTotal
Доказательства и внешние отчетыIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Если вы ввели учетные данные, личную или платежную информацию или загрузили файл с этого домена, примите немедленные меры. Ниже приведены ресурсы, которые помогут вам сообщить об инциденте и защитить себя.
Сообщите об этом в местные органы власти
Выберите свою страну, чтобы получить официальные контакты по киберпреступности или создать проект жалобы →.