# 7-slonov.ru — SUSPICIOUS

> 7-slonov.ru is impersonating a payment portal for phishing scams. Check the full report for security insights and mitigation steps.

## Summary
PhishDestroy identifies 7-slonov.ru as an active generic phishing domain under investigation, specifically targeting users through fraudulent payment portal impersonation.

This domain was flagged with zero detections out of 95 scanners on VirusTotal, indicating poor visibility among security tools despite its active phishing operations. Registered through RU-CENTER-RU on February 3, 2010, the domain resolves to Russian IP address 89.108.123.247, a hosting provider linked to low trust scores and minimal compliance with anti-abuse policies. The domain also utilizes a Let's Encrypt SSL certificate, a tactic commonly abused to appear legitimate while facilitating credential theft or malware distribution.

Users should avoid interacting with this domain, especially if prompted for payment or login credentials. If accessed inadvertently, clear browser cache and cookies, scan the device with updated antivirus software, and report the domain to local cybersecurity authorities or the domain registrar for takedown. For organizations, consider blocking the IP range and SSL certificate fingerprint across networks to prevent further exploitation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2010-02-03 21:00:00
- Registrar: RU-CENTER-RU
- IP: 89.108.123.247

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5e93d1fc-e4e3-4f16-81b9-151ff8cd5c6f
- PhishDestroy: https://phishdestroy.io/domain/7-slonov.ru/
- LLM endpoint: https://phishdestroy.io/domain/7-slonov.ru/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/7-slonov.ru/
Last updated: 2026-03-28