slon-4------cc[.]ru

The domain slon-4------cc.ru is identified as a potential credential theft scam and is currently offline. This domain was created on March 28, 2026, and has been registered through REGRU-RU. The infrastructure analysis reveals that the domain resolves to the IP address 145.249.115.222.

Analysis indicates that slon-4------cc.ru has been flagged by 2 out of 95 VirusTotal vendors, suggesting a low but notable level of suspicion. The domain appears on one security blocklist, further emphasizing its potential involvement in malicious activities. The SSL certificate for this domain is issued by Let's Encrypt, which is a common practice for both legitimate and suspicious sites. The creation date of March 28, 2026, and the association with the registrar REGRU-RU, provide additional context for the domain's recent emergence and potential risk.

Given the current offline status of slon-4------cc.ru, users should exercise caution if the domain becomes active again. It is recommended that any potential interactions with this domain be avoided until further security assessments are conducted. Organizations should update their security policies to block access to this domain and monitor for any related activities that could indicate credential theft attempts. Regularly updating and educating users on phishing threats can also help mitigate risks associated with this domain.