slon15cc[.]net

This domain is flagged under brand impersonation targeting kraken with an active status and high risk level. The domain slon15cc.net was created on March 13 2026 through NiceNIC International Group Co. Limited and resolves to IP address 172.67.170.166. Its SSL certificate was issued by Let's Encrypt while the associated page title is recorded as slon15.cc. These registration and infrastructure details establish the observable footprint without reference to unconfirmed operational elements.

Detection metrics include a Gridinsoft trust score of 0/100 and VirusTotal results showing 12 out of 95 security vendors flagging the domain. AlienVault OTX lists the domain in 23 threat intelligence pulses and it appears on 2 security blocklists. Additional blocks are noted from PhishDestroy and BLP-Malware confirming continued presence as of the July 12 2026 report date. The combination of low trust indicators and multiple external listings provides concrete evidence of prior identification by detection systems.

Uncertainties remain around the precise content served at the time of access since only the page title and brand target are documented. No further details on kit type or hosting provider beyond the IP and registrar are supplied so the full scope of any campaign infrastructure cannot be determined from available data alone. The domain's ongoing active status indicates it has not yet been taken down despite the listed detections.

Defenders should incorporate the domain slon15cc.net and IP 172.67.170.166 into blocklists and monitoring rules immediately. Cross reference with existing threat pulses from AlienVault OTX and maintain checks against the two known blocklists to limit exposure. Continued observation of similar domains registered through NiceNIC after March 2026 is advisable given the current high risk classification and active status.