at-slon5[.]cc

The domain at-slon5.cc has been assessed as an elevated risk for a specific type of generic phishing, focusing on fake login scams. This domain poses a significant threat to users who may inadvertently enter their credentials, leading to potential account compromise and data theft.

Analysis indicates that at-slon5.cc has been flagged by 15 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus regarding its malicious nature. The domain is registered through NiceNIC International Group Co., Limited, and resolves to the IP address 188.114.97.3. It was created on March 12, 2026, and has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The domain appears on one security blocklist and has been taken offline as of the latest assessment. The SSL certificate is issued by Let's Encrypt, which is commonly used by legitimate sites but does not guarantee the domain's safety. Technologies detected on the site include Yandex.Metrika and Cloudflare, which are often used to track user activity and provide CDN services, respectively. The page title found is 'slon5.cc', which may be used to impersonate a legitimate brand or service.

To mitigate the risks associated with this fake login scam, users are advised to verify the URL and domain name of any login page before entering their credentials. Organizations should update their security policies to include regular phishing awareness training and implement DNS-based filtering to block access to known malicious domains. Additionally, network administrators should monitor for any attempts to access this domain and take appropriate action to prevent user exposure, such as deploying web filters and educating employees about the importance of multi-factor authentication.