5slon-5cc[.]ru

The domain 5slon-5cc.ru is currently involved in a credential theft phishing scheme. This means the site attempts to trick visitors into revealing sensitive login credentials, such as usernames and passwords, which can be used for identity theft or unauthorized account access. While the attack specifics are still under investigation, the core risk is the potential compromise of personal or financial information.

This domain was registered recently on March 24, 2026, through the REGRU-RU registrar, indicating a newly created threat likely aiming to evade detection. Although VirusTotal reports 2 out of 95 engines detecting malicious content, this low detection rate is common for freshly deployed phishing domains before widespread reporting. The domain resolves to IP address 209.141.42.45 and uses a Let's Encrypt SSL certificate, which attackers often leverage to lend a false sense of security to their fake sites.

If you have visited 5slon-5cc.ru or entered any credentials, immediately change your passwords for any accounts that may be at risk. Enable multifactor authentication where available to add a layer of protection. Avoid clicking links or providing data on unfamiliar domains, especially those registered recently with no reputation. Monitor your accounts for suspicious activity and report any fraudulent incidents to your service providers promptly.