slon10[.]sbs

slon10.sbs has been identified as a live credential-harvesting domain with low detection coverage. This site poses a direct threat to users who may unknowingly submit sensitive information, potentially leading to account takeovers and financial fraud. The domain resolves to IP 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 24, 2026. Notably, VirusTotal currently shows 5/95 security engines flagging this domain, indicating it remains under the radar despite active abuse. This domain was flagged as a generic phishing page, meaning it mimics legitimate services to trick users into revealing login credentials or personal data. The threat is heightened by its recent registration and lack of detection, suggesting it could be part of a broader campaign targeting unsuspecting victims. The presence of a Let’s Encrypt SSL certificate adds a false sense of legitimacy, further deceiving users into trusting the site. If you’ve visited slon10.sbs, avoid entering any credentials or personal information. Disconnect from the site immediately and scan your device for malware. Monitor accounts linked to any entered credentials for suspicious activity, and consider enabling multi-factor authentication where possible. Report the domain to your security team or relevant authorities to help block its continued use.