slonkr7cc[.]kraken-ssylka[.]click

The domain slonkr7cc.kraken-ssylka.click was registered through Dynadot, LLC on April 05, 2026 and is currently marked as active with a high risk rating. Google Safe Browsing classifies the site as social engineering, indicating it is being used to lure victims into providing credentials or personal information. VirusTotal scans show that 14 out of 91 security vendors flag the domain, suggesting a consensus among multiple detection engines that the site hosts malicious content or behavior.

The domain appears on three independent security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, further confirming its involvement in phishing campaigns. Infrastructure analysis reveals the domain resolves to Cloudflare nameservers cory.ns.cloudflare.com and martha.ns.cloudflare.com, a common pattern for fast‑flux or anonymized hosting used by threat actors. No additional technical details such as IP address, SSL certificate attributes, HTTP response codes, or page title have been disclosed, leaving those aspects of the infrastructure unverified.

Defenders should immediately add slonkr7cc.kraken-ssylka.click to internal blocklists, monitor DNS queries for the associated Cloudflare nameservers, and enforce web filtering rules that deny traffic to the domain. Continuous monitoring of threat intel feeds for any new indicators tied to this domain is advised, as further malicious payloads or credential‑harvesting pages may be deployed later. Given the multiple vendor detections, blocklist listings, and Safe Browsing flag, the domain should be treated as a confirmed phishing source pending any additional investigative findings.