slon10att[.]ru

PhishDestroy identifies slon10att.ru as a crypto drainer domain under active investigation, posing a high-risk threat to cryptocurrency users. This domain mimics legitimate services to siphon digital assets through deceptive transaction prompts. Users interacting with slon10att.ru risk irreversible financial losses due to unauthorized fund transfers orchestrated by the drainer script embedded in the site. This domain was flagged with a risk level of under_investigation and exhibits multiple red flags: it carries a Let's Encrypt SSL certificate, was registered through REGRU-RU on February 18, 2026, and resolves to IP 95.163.244.138. VirusTotal currently shows 1/95 detections, indicating it evades most antivirus engines. The domain's recent creation date and absence of entries on major blocklists suggest it is newly operational and actively evolving to avoid detection. Trust scores remain critically low due to the lack of historical reputation and transparent ownership. To mitigate risk, users must avoid interacting with slon10att.ru or any linked cryptocurrency platforms. Verify URLs through PhishDestroy before entering credentials or approving transactions. Block the IP 95.163.244.138 at the network level and report the domain to your browser’s safe browsing tools. If exposed, revoke connected wallet permissions immediately and scan devices for malware. Cryptocurrency users should prioritize hardware wallet transactions and cross-check URLs against official project websites to prevent drainer exploits.