Security Review

Is xn--sln10-1ta.cc legit or a scam?

Our verdict:Dangerous· 3/100

This 69-day-old domain is a phishing portal impersonating a darknet marketplace, flagged by alphaMountain.ai and SOCRadar for malicious activity.

xn--sln10-1ta.ccScanned 20h ago
0
Trust score
DANGEROUS
Heuristics 0·MT 5
Category tags
phishingdarknet portal#phishing#clone site95% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
4/92
Engines flagged this URL
Domain Age
69 days old
Registered Apr 18, 2026
MT Intelligence
Dangerous
Critical likelihood · 95% confidence
DANGEROUS

Critical risk detected

4 of 92 antivirus engines flag this page (3 outright malicious). Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Website Preview

Screenshot of xn--sln10-1ta.cc
LIVE RENDER
xn--sln10-1ta.cc

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust5/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The site functions as a landing page for a known darknet marketplace, using multiple 'mirror' links to redirect users. Our antivirus partners, including alphaMountain.ai, Forcepoint ThreatSeeker, and SOCRadar, have explicitly flagged the domain as a phishing threat. The domain was registered only 69 days ago and uses an IDN (Internationalized Domain Name) structure, a common tactic for creating deceptive URLs. There is a complete absence of contact information, legal disclosures, or verifiable ownership. Independent trust aggregators also rate this domain at the lowest possible safety level.
Full dossier
Analysis complete

Page Content

The page content is written in Russian and explicitly promotes 'Kraken,' a notorious darknet marketplace. It provides various 'mirror' links (slon10.at, krab3.cc) and claims to offer anonymous trading of illegal substances and services. The text is designed to lure users into logging into these platforms, which is a classic setup for credential harvesting.

Infrastructure

The site is hosted on IP 193.17.182.202. While the IP itself hasn't triggered high abuse scores yet, the use of a Let's Encrypt SSL certificate on a very young domain is typical for ephemeral phishing sites. The site loads external resources from Google, but lacks any internal infrastructure typical of a legitimate business.

Domain History

Registered just 69 days ago through Dynadot, the domain is in its infancy. It utilizes a Punycode/IDN format (xn--sln10-1ta.cc) which translates to a name visually similar to other known 'slon' mirrors, a technique often used to bypass simple text filters and deceive users.

Web Reputation

Reputation signals are overwhelmingly negative. Four separate security engines have blacklisted the site for phishing and suspicious behavior. Furthermore, independent review aggregators have assigned it a trust score of 10/100, indicating a high risk of fraud.

Risk Factors
6
  • Flagged as phishing by alphaMountain.ai, Forcepoint, and SOCRadar.
  • Domain is only 69 days old, indicating a high-risk 'throwaway' site.
  • Promotes access to illegal darknet marketplaces and 'mirrors'.
  • Total lack of contact information, physical address, or phone number.
  • Uses an IDN/Punycode domain structure often associated with deceptive links.
  • Extremely low trust rating (10/100) from independent security aggregators.
Positive Signals
1
  • Valid SSL certificate is present.
AI Recommendation
Avoid this site entirely. Do not click any links or attempt to log in, as your credentials will likely be stolen by the site operators.
Scam network detected
5 linked domains correlated

The site explicitly lists and links to a network of 'mirror' domains used to facilitate access to the same illicit platform.

slon10.atkrab3.cckrab3.atslon9.ccslon8.cc
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for xn--sln10-1ta.cc, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
2 months
Registered Apr 2026
Independent review aggregators
10/100 · low trust
Average across 1 independent review aggregator.
Web mentions
4 scam reports
Web ratings
Scores pulled directly from third-party trust & review sites
ScamAdviser
10/100
High riskopen
Research summary
4 scam mentions · 0 trust mentions found online

Security engines and trust aggregators consistently identify this domain as a high-risk phishing portal associated with darknet marketplace impersonation.

Antivirus Engines

Detection matrix · live
4 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

3Malicious1Suspicious58Harmless92Engines
0
of 92
alphaMountain.ai
Malicious· phishing
Forcepoint ThreatSeeker
Malicious· phishing
SOCRadar
Malicious· phishing
Gridinsoft
Suspicious· suspicious

4 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age69 days old
RegistrarDynadot Inc
RegisteredApr 18, 2026
ExpiresApr 18, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · YE2
ExpiresSep 16, 2026 (81d)
Self-signedNo
Hosting & Technology
HostingIndividual Entrepreneur Anton Levin
Server locationFI
Web servernginx

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
Yes
  • 1301http://xn--sln10-1ta.cc/
  • 2200https://xn--sln10-1ta.cc/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPIndividual Entrepreneur Anton Levin
Usage typeData Center/Web Hosting/Transit

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

  • Do not interact with xn--sln10-1ta.cc

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags xn--sln10-1ta.cc as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — xn--sln10-1ta.cc scored 3/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. xn--sln10-1ta.cc presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE2, expiring in 81 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • xn--sln10-1ta.cc is 2 months old, registered on 4/18/2026 through Dynadot Inc. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 4 out of 92 antivirus engines in our malware network flagged xn--sln10-1ta.cc as malicious or suspicious (3 outright malicious). Even one detection is a meaningful signal.
  • No. xn--sln10-1ta.cc is not currently listed on the major browser blocklist feeds that modern browsers use.
  • xn--sln10-1ta.cc resolves to an IP operated by Individual Entrepreneur Anton Levin in FI (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Independent trust-rating sites currently show the following for xn--sln10-1ta.cc: ScamAdviser: 10/100. Those scores come from user reviews and their own heuristics, so they are worth comparing against our verdict.

Final Verdict

0
Trust / 100
Final Verdict·xn--sln10-1ta.cc
DANGEROUS

This is a phishing gateway designed to impersonate the 'Kraken' darknet marketplace. Multiple security engines have flagged it as a threat, and it lacks any legitimate business information. Do not enter any credentials or interact with the links on this page.

Avoid this site entirely. Do not click any links or attempt to log in, as your credentials will likely be stolen by the site operators.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.