slon2to[.]shop

The domain slon2to.shop has been identified as a generic phishing site and is currently taken offline. There is no evidence that it impersonated a specific brand or used any known drainer kit. Users searching whether slon2to.shop is safe or a scam should be aware that it posed a phishing threat and has been blocked by at least one security service. As of now, the site is not accessible.

Technical analysis shows that slon2to.shop was registered through REGRU-RU on March 02, 2026, and resolves to the IP address 172.67.177.17, located in the US under AS13335 Cloudflare, Inc. Two out of 95 security vendors on VirusTotal (including Gridinsoft and SOCRadar) have flagged this domain for malicious activity, and it appears on one security blocklist, specifically PhishDestroy. The domain used Cloudflare Browser Insights and HTTP/3 technologies, with ali.ns.cloudflare.com and zahir.ns.cloudflare.com as nameservers. The observed page title was 'Captcha'.

Anyone who interacted with slon2to.shop should consider their credentials compromised and immediately change any passwords used, enable two-factor authentication where possible, and monitor for unauthorized account activity. If personal or sensitive information was submitted, users should report the incident to their relevant service providers and local authorities. Security incidents involving slon2to.shop can also be reported to blocklist maintainers such as PhishDestroy for further investigation.