Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
slon12at[.]net
“slon12.at”
slon12at.net — असत्यापित. घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 3/94 (Fortinet, Gridinsoft, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 65/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
On 13 March 2026 the domain slon12at.net was registered through NiceNIC International Group Co., Limited. The site presents the page title “slon12.at” and is served over HTTPS using a Let’s Encrypt certificate (issuer E7) that is currently valid. DNS resolution points to 172.67.165.101, an address owned by AS13335 Cloudflare, Inc., and the domain is delegated to Cloudflare nameservers blair.ns.cloudflare.com and lochlan.ns.cloudflare.com. Traffic analysis shows the presence of Cloudflare Browser Insights and HTTP/3, indicating the use of Cloudflare’s edge services for content delivery and possibly for obfuscation of the true hosting location. Reputation checks flag the domain as high‑risk.
It appears on one security blocklist and is specifically listed by PhishDestroy as a malicious entry. VirusTotal scans returned three positive detections out of ninety‑four antivirus engines, reinforcing the suspicion. Gridinsoft assigns a trust score of 0 / 100, the lowest possible rating. The combination of blocklist presence, multiple vendor detections, and a zero trust score led to the classification of the domain as a generic phishing infrastructure with a high risk rating. The available evidence does not reveal the exact phishing payload, targeted brand, or lure content; the page title is the only visible indicator and no further content analysis has been published.
Consequently, the precise attack vector remains uncertain, but the infrastructure characteristics—newly registered domain, Cloudflare fronting, and multiple security vendor alerts—are consistent with active phishing campaigns. Defenders should proactively block slon12at.net at DNS, proxy, and firewall layers, and add the associated IP address 172.67.165.101 to deny lists, recognizing that the IP is shared among many Cloudflare customers.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-13 02:48:46 UTC
तकनीकें · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of slon12at.net · checked Mar 13, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260313-9C5AA6 Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।