slon3cc[.]net

This domain, slon3cc.net, is flagged as a high-risk phishing site targeting users of slon3.cc, as indicated by its page title matching the legitimate domain. Registered on February 28, 2026, through NiceNIC International Group Co., Limited, the domain remains active and resolves to IP 172.67.159.130, which is associated with Cloudflare infrastructure. Detection by 4 of 95 security vendors on VirusTotal and inclusion in 23 threat intelligence pulses on AlienVault OTX further confirm its malicious classification. The domain appears on two security blocklists and is explicitly blocked by PhishDestroy and BLP-Malware. SSL certification is provided by Let's Encrypt, a common choice for both legitimate and malicious sites. Technologies detected include Cloudflare Browser Insights, Cloudflare, and HTTP/3, suggesting the use of content delivery and performance optimization tools to enhance the phishing operation's effectiveness. While the exact content or targeted brand beyond the page title is not yet analyzed, the domain's infrastructure and detection history indicate a deliberate attempt to deceive users. Defenders should block this domain at the DNS or proxy level, monitor for related indicators, and investigate any connections to internal networks or user activity involving this address.