slon3[.]de

PhishDestroy first observed slon3.de on Jun 14, 2026. Current evidence score: 83/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 9 detections among 94 engines: ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, CRDF, CyRadar, Fortinet, Gridinsoft, Seclookup, SOCRadar on Jul 18, 2026 at 18:45 UTC. Cloudflare Radar classified the hostname as malicious and assigned the categories phishing and security threats; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 1 community pulse reference (not vendor detections) on Apr 13, 2026 at 17:10 UTC. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 06:20 UTC. Google Safe Browsing returned no flag on Apr 14, 2026 at 05:00 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 22:48 UTC; content was unavailable. The recorded creation date for the domain is Apr 13, 2026. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. TLS metadata lists Let's Encrypt / E8 as the certificate issuer with validity through Jun 3, 2026; checked Apr 13, 2026 at 14:00 UTC.

Neither a page title nor a landing-page capture is stored. The record contains 2 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.