slon8[.]ltd

The domain slon8.ltd was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 31, 2026. Within two months of its creation, the domain has been observed by multiple security services. VirusTotal records show that six of ninety‑one scanning engines have flagged the domain as malicious, indicating that at least a subset of detection tools recognize it as a threat. The domain is currently listed on a public security blocklist and has been added to the PhishDestroy blocklist, confirming that operational defenses have taken action to prevent access.

No additional infrastructure details such as hosting IP, SSL certificate information, or HTTP response codes are publicly disclosed at this time. The limited detection coverage suggests that the site may be employing techniques to evade broader detection, or that it is in early stages of deployment. Defenders should proactively block slon8.ltd at perimeter firewalls, DNS filtering services, and endpoint web controls.

Security teams are advised to monitor VirusTotal and other multi‑engine aggregators for any increase in the number of detections, and to review any inbound traffic logs for connections to the domain. Users should be warned that the site is associated with generic phishing activity and that credential submission or other sensitive data entry should be avoided. Ongoing intelligence collection is recommended to capture any future changes to the site’s hosting, certificate, or content characteristics.