slona7[.]ru

Analysis of slona7.ru indicates this domain is actively hosting a high-risk phishing operation targeting online gaming or betting users. The domain was registered on March 28, 2026, and currently resolves to IP address 104.21.48.196. The page title 'SLON7.TO' suggests an association with gambling or gaming platforms, though the exact content and targeted brand remain unconfirmed due to lack of deeper forensic analysis. Infrastructure review shows the domain uses a Let's Encrypt SSL certificate, a common choice for both legitimate and malicious sites. It appears on two security blocklists and is flagged by 6 of 95 security vendors in recent scans. Additionally, the domain is referenced in 22 threat intelligence pulses, indicating widespread detection across multiple threat-sharing platforms. While the specific phishing kit or lure type is not identified, the combination of early detection, blocklist inclusion, and intelligence pulses strongly suggests active malicious intent. Defenders should treat this domain as hostile. Network-level blocking is recommended, along with monitoring for related domains using the same IP or SSL certificate patterns. Further analysis of the site’s content and backend infrastructure could reveal additional indicators, but current evidence is sufficient to classify slona7.ru as a confirmed phishing threat.