slon2market[.]cc

This domain, slon2market.cc, is flagged as a generic phishing threat with elevated risk based on multiple security indicators. Registered on March 11, 2026, through NiceNIC International Group Co., Limited, it uses nameservers a.dnspod.com and c.dnspod.com. The domain resolves to IP address 89.34.230.250, hosted in the Netherlands under AS207847 CloudBlast LLC. SSL encryption is provided via a Let's Encrypt R13 certificate. The page title recovered is 'KRA - всегда свежие продукты в нашем маркете', which translates to 'KRA - always fresh products in our market', indicating a likely impersonation of a marketplace, though the exact brand or platform is not explicitly identified in the known data.

Security vendor analysis on VirusTotal shows 7 out of 94 detection engines flagging the domain as malicious. It is present on one security blocklist and found in one AlienVault OTX threat intelligence pulse. Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser rates it at 21 out of 100. PhishDestroy has blocked the domain.

The domain has been taken offline as of the report date. Defenders should treat any interaction with this domain as compromised, monitor for related subdomains or variations, and block traffic to the IP and associated infrastructure. The exact nature of the phishing page content beyond the title remains unconfirmed, and no brand or kit details are available from the data.