slon2-cc-c[.]ru

PhishDestroy identifies slon2-cc-c.ru as an active credit card credential harvesting scam. The domain is currently operational and engaged in fraudulent activities designed to deceive users into submitting sensitive payment information. No specific brand impersonation has been confirmed at this stage, but the site mimics financial transaction interfaces to facilitate credential theft. Users interacting with this domain risk unauthorized access to their payment details, potential financial loss, and identity compromise.

This domain was flagged by 2 of 95 VirusTotal vendors as of the latest scan, indicating undetected malicious activity. Registered through RU-CENTER-RU on February 21, 2026, slon2-cc-c.ru resolves to IP address 89.169.183.108. The domain remains unlisted on major blocklists, with no recorded trust scores or historical reputation data. Given its recent creation and absence of detections, the threat level is classified as 'under_investigation' but remains active and poses a significant risk to unsuspecting users.

The current status of slon2-cc-c.ru is active, with no immediate takedown actions recorded. To mitigate risks, users are advised to avoid accessing the domain entirely. Organizations should implement network-level blocking for the domain and IP address (89.169.183.108) to prevent accidental exposure. Immediate reporting to relevant cybersecurity authorities and financial institutions is recommended if credentials or payment details were entered. Continuous monitoring of this domain is advised due to its low detection rate and high potential for escalation.