slonj6[.]cc

This domain, slonj6.cc, is an active generic phishing site with no specific brand impersonation or drainer kit identified. The threat type is generic phishing, indicating a broad attempt to deceive users into disclosing sensitive information without targeting a particular entity.

Technical indicators: VirusTotal detection score is 2 out of 95 security vendors. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with high-risk domains. It resolves to IP address 5.253.59.165 and was created on May 30, 2026. Google Safe Browsing status is not explicitly provided, but the low vendor detection suggests it may not yet be widely blocklisted. The SSL certificate is issued by Let's Encrypt, a free certificate authority frequently used by malicious sites.

Current status remains active, with no reported takedown actions. Infrastructure analysis shows the IP is likely shared among multiple domains. Remaining risk is high due to active status and low detection rate, allowing the site to continue operating undetected by many security tools. Safety guidance: Users should avoid interacting with this domain, do not enter any credentials or personal data, and report the domain to their security team or blocklist providers. Organizations should monitor for any connections to this IP in network logs.