slon3--c-c[.]ru

The domain slon3--c-c.ru is a phishing operation that has been flagged by 6 out of 94 vendors on VirusTotal. Despite its current offline status, the domain was hosted on an IP address managed by CloudFlare, Inc., located in Canada. The domain's SSL certificate was issued by Let's Encrypt, a common choice for malicious actors due to its free and automated nature.

This domain was created on March 28, 2026, indicating a potential future threat. It is unusual for domains to have creation dates set in the future, which could suggest an attempt to evade detection or a clerical error during registration. The domain was listed on one public blocklist, specifically PhishDestroy, highlighting its malicious nature.

Phishing domains like slon3--c-c.ru often exploit the gap between registration and detection by antivirus databases, which can take 24-72 hours to propagate. PhishDestroy's pipeline identifies these threats during this critical window, allowing for early detection and mitigation. The fact that the domain was taken down suggests that it was actively used for malicious purposes before being flagged and removed from operation.