# slon-09.cc — MALICIOUS

> Warning: slon-09.cc hosts a fake login page. This domain, resolving to 104.21.63.95, was flagged by 8/95 vendors on VirusTotal. Verify on PhishDestroy.

## Summary
PhishDestroy has identified slon-09.cc as an active phishing site hosting a fake login page. This campaign attempts to steal user credentials by mimicking a legitimate login form. The domain does not appear to impersonate a specific brand, indicating a generic credential harvesting operation.

Technical indicators for this threat include a VirusTotal score of 8/95, registration through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolution to IP address 104.21.63.95. The domain was created on March 14, 2026, and is secured with a Let's Encrypt SSL certificate. slon-09.cc appears on 1 security blocklist and is blocked by Hagezi.

The domain is currently active and poses an elevated risk to users. Immediate response actions include continued monitoring and dissemination of threat intelligence to prevent further compromise. Users are advised to avoid interacting with the site and to verify any login requests originating from this domain. The risk remains elevated until the domain is fully suspended or sinkholed.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-14 13:48:43
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.63.95

## Detection Status
- VirusTotal: 8 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["Hagezi"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2e187669-f9cc-4ebb-ad7f-2738edc73226
- PhishDestroy: https://phishdestroy.io/domain/slon-09.cc/
- LLM endpoint: https://phishdestroy.io/domain/slon-09.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon-09.cc/
Last updated: 2026-03-28