slokn5[.]cc

The domain slokn5.cc was created on March 28, 2026 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Infrastructure analysis shows it resolves to 141.98.234.104, an address attributed to a Hong Kong entity (Quasar LLC). The host runs Nginx web server, serves content over HTTPS with a Let’s Encrypt R12 certificate, and returns HTTP 200 for the index request. DNS is delegated to jasmine.ns.cloudflare.com and kyle.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. The page title observed is "СтройКаталог - Обзор магазинов стройматериалов России," suggesting the site pretends to be a Russian construction‑materials catalog, consistent with the classified e‑commerce scam. Threat intelligence flags the domain as a high‑risk generic phishing operation; four of ninety‑four VirusTotal scanners have reported malicious activity, and the site is listed on a security blocklist and blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Current status is active. While the exact phishing payload or credential‑harvesting mechanisms have not been disclosed, the combination of a newly registered domain, low trust rating, and alignment with known e‑commerce phishing patterns warrants immediate defensive action. Organizations should add slokn5.cc to URL filtering and DNS blocklists, monitor outbound connections to its IP, and enforce TLS inspection to detect any credential capture attempts. Continuous re‑evaluation is advised as further indicators may emerge.