slon12cc[.]com

The domain slon12cc.com is currently active and associated with generic phishing threats, as indicated by its classification and the high-risk level assigned. The domain was created on March 13, 2026, and is flagged in 23 threat intelligence pulses from AlienVault OTX, highlighting its recognition in the cybersecurity community as a malicious entity. It has been blocked by notable services, such as PhishDestroy and BLP-Malware, further confirming its malicious intent. The domain resolves to the IP address 104.21.96.42, which may indicate a shared hosting environment commonly used by phishing sites to obscure their origins.

The page title associated with slon12cc.com is slon5.to, suggesting a potential connection or branding alignment with other suspicious domains. Analysis of security vendor feedback through VirusTotal reveals that 12 out of 95 vendors flagged this domain, which underscores a significant risk. Additionally, the domain has a trust score of 0 out of 100 from Gridinsoft, indicating a lack of credibility and trustworthiness in online interactions. This domain is also present on two security blocklists, which is a strong indicator of its fraudulent nature.

The SSL certificate is issued by Let's Encrypt, a common service used to secure communications, but in this case, may also lend a false sense of legitimacy to the phishing activities associated with slon12cc.com. Technologies detected include Cloudflare Browser Insights and HTTP/3, which are often employed by attackers to enhance the performance and resilience of their malicious sites against detection and takedown efforts. Defenders are advised to implement monitoring and blocking measures against this domain and its IP address to mitigate potential phishing attacks targeting their user base.