# slon12cc.net — SUSPICIOUS

> slon12cc.net is linked to phishing risks with active status. Avoid interaction and monitor for suspicious activity to protect your data.

## Summary
PhishDestroy identifies slon12cc.net as a medium-risk phishing domain targeting unsuspecting users. This domain is associated with generic phishing attempts, posing threats of credential theft and potential fraud. The page title 'slon12.cc' suggests an attempt to mimic legitimate sites to deceive visitors.

The domain was registered on March 13, 2026, through NiceNIC International Group Co., Limited and is currently active. It resolves to the IP address 172.67.180.238. The domain appears on one security blocklist and has been flagged by 3 out of 95 security vendors on VirusTotal, indicating some recognition of its malicious intent. This infrastructure information underlines the ongoing risk related to this domain.

Given its active status and presence on blocklists, users and organizations should avoid visiting slon12cc.net or interacting with any content it serves. Security teams are advised to update their filters and monitoring systems to block this domain. Continued vigilance and timely reporting will help mitigate the risks posed by this phishing threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: slon12.cc

## Domain Intelligence
- Registered: 2026-03-13 03:07:02
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 172.67.180.238
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: blair.ns.cloudflare.com lochlan.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce540-c2da-7169-be65-0d303f762498.png
- PhishDestroy: https://phishdestroy.io/domain/slon12cc.net/
- LLM endpoint: https://phishdestroy.io/domain/slon12cc.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/slon12cc.net/
Last updated: 2026-03-19