slonn6[.]ru

The domain slonn6.ru is associated with a crypto drainer phishing campaign and is currently offline. This domain impersonates a legitimate cryptocurrency service, potentially targeting users of well-known crypto platforms.

Analysis indicates that slonn6.ru has been flagged by 16 of 95 security vendors on VirusTotal, suggesting a significant level of suspicion and potential threat. The domain was registered with Let's Encrypt, a reputable certificate authority, which may have been leveraged to gain user trust. The domain was created on March 28, 2026, and has appeared on 1 security blocklist, indicating prior malicious activity. The domain's current status as offline suggests that it may have been taken down by the registrar or security organizations in response to detected threats.

Given the elevated risk level and the presence of the domain on a security blocklist, organizations and individuals are advised to remain vigilant and avoid any interactions with slonn6.ru. Security teams should update their threat intelligence databases to include this domain and monitor for any signs of reactivation. Additionally, users should be educated on recognizing and reporting phishing attempts, particularly those involving cryptocurrency services. Regularly updating antivirus and anti-malware software, using multi-factor authentication, and verifying URLs before entering sensitive information are recommended best practices.