Analysis of the domain slon--7-cc.ru indicates that it remains active as of the report date, July 31, 2026. The domain was registered on April 12, 2026 through the registrar FE-RU and is served by Cloudflare name servers dalary.ns.cloudflare.com and sage.ns.cloudflare.com. DNS resolution points to the IPv4 address 64.7.199.194, which is the sole host observed for this indicator.
A VirusTotal scan involving 91 security vendors has been performed; at the time of scanning no vendor flagged the domain as malicious, though the absence of detections does not constitute a safety guarantee. The domain appears on a single security blocklist and is listed as blocked by the PhishDestroy service, reflecting that at least one external threat‑intelligence feed has identified it as malicious. No additional public reputation scores, SSL certificate details, HTTP response codes, or page‑title information are presently available, leaving the surface‑web characteristics of the site unverified.
The limited data set suggests a recent phishing infrastructure that leverages Cloudflare’s CDN to obscure the true hosting environment. Defenders should consider adding slon--7-cc.ru to local blocklists, monitor DNS queries for the associated IP address, and enforce outbound email filtering to prevent credential harvesting attempts that may be linked to this domain. Ongoing observation of threat‑intel feeds for any new detections, changes in blocklist status, or emergence of additional indicators is recommended to refine the risk assessment as further evidence becomes available.