slon11c[.]cc

PhishDestroy identifies slon11c.cc as an active phishing domain specifically involved in fake login scams designed to steal user credentials. There is no direct indication of a specific brand impersonation or crypto drainer kit associated with this domain, but the generic phishing threat type suggests attempts to obtain sensitive login information through fraudulent means.

From a technical perspective, slon11c.cc has a VirusTotal detection rate of 5 out of 95 security vendors, indicating that some security tools recognize it as malicious though it may evade others. The domain was created on February 18, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It uses a free SSL certificate issued by Let's Encrypt, which is commonly used in phishing as a means to appear legitimate. The domain resolves to IP address 104.21.1.128. While there is no specific mention of Google Safe Browsing (GSB) status or blocklist count in the reported data, the domain's presence in virus scanning engines confirms an elevated risk.

Currently, slon11c.cc remains active and continues to pose a threat to users who might interact with its fake login pages. It is strongly advised that internet users avoid visiting the domain and verify any suspicious links or login requests on trusted platforms such as PhishDestroy. Security teams should consider blocking this domain at the network level and continue monitoring for updated intelligence, as the threat from phishing domains can rapidly evolve and lead to credential theft and account compromises.