slon-3[.]com

The domain slon-3.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited. It resolves to the IP address 172.67.192.206, which belongs to AS13335 operated by Cloudflare in the United States. The domain is served over HTTPS using a Let’s Encrypt certificate (issuer E7) and responds with an HTTP 301 redirect. The page title returned by the server is “slon3.cc”, indicating a possible content mismatch or redirect to a secondary host. Security monitoring shows the domain appears on a single blocklist, PhishDestroy, and has a Gridinsoft trust score of 0 out of 100. VirusTotal reports three out of ninety‑five scanners flagging the domain as malicious. The site leverages Cloudflare Browser Insights and HTTP/3, confirming the use of Cloudflare’s edge network and modern transport protocols. Current intelligence does not reveal the exact payload or credential‑harvesting mechanism used by the site, and only limited vendor detections are available. The mismatch between the domain name and the page title suggests a possible redirection to “slon3.cc”, but the final landing page has not been captured. No additional infrastructure such as command‑and‑control servers or malware samples has been linked to the domain at this time. Defenders should treat slon-3.com as a high‑risk indicator. Immediate actions include adding the domain to DNS and proxy block lists, monitoring for outbound connections to the associated IP address, and inspecting any HTTP 301 redirects for malicious payloads. Continuous re‑evaluation is advised, as additional detections may emerge from broader scanning platforms.