7-slonov[.]ru

PhishDestroy identifies 7-slonov.ru as an active generic phishing domain under investigation, specifically targeting users through fraudulent payment portal impersonation.

This domain was flagged with zero detections out of 95 scanners on VirusTotal, indicating poor visibility among security tools despite its active phishing operations. Registered through RU-CENTER-RU on February 3, 2010, the domain resolves to Russian IP address 89.108.123.247, a hosting provider linked to low trust scores and minimal compliance with anti-abuse policies. The domain also utilizes a Let's Encrypt SSL certificate, a tactic commonly abused to appear legitimate while facilitating credential theft or malware distribution.

Users should avoid interacting with this domain, especially if prompted for payment or login credentials. If accessed inadvertently, clear browser cache and cookies, scan the device with updated antivirus software, and report the domain to local cybersecurity authorities or the domain registrar for takedown. For organizations, consider blocking the IP range and SSL certificate fingerprint across networks to prevent further exploitation.