slon-8-cc[.]info

Analysis of slon-8-cc.info indicates that the domain was registered on June 23, 2026 through Dynadot Inc and is currently active. The authoritative name servers are amos.ns.cloudflare.com and kay.ns.cloudflare.com, pointing to Cloudflare’s DNS infrastructure. The domain resolves to IP address 104.21.96.52, which is associated with Cloudflare’s edge network and does not reveal the underlying hosting provider. The TLS certificate presented is issued by Google Trust Services under the WE1 root, confirming that HTTPS connections are terminated by Cloudflare’s edge. No public threat intelligence beyond the generic phishing classification is available; the specific brand or service being spoofed has not been identified. VirusTotal has recorded 91 vendor scans but no detections, although the absence of detections does not constitute a safety assurance. Given the recent creation date, the use of reputable DNS and TLS services, and the lack of content analysis, the infrastructure appears to be a typical short‑lived phishing deployment. Defenders should consider adding the domain to blocklists, monitoring DNS queries for the associated IP, and employing sinkholing where feasible. Continuous re‑evaluation is recommended as additional artifacts such as landing page content or phishing kits become available.