slon7--cc[.]ru

Analysis of slon7--cc.ru indicates an active generic phishing campaign under investigation. The domain was registered on April 06, 2026 through RU-CENTER-RU and is hosted on Cloudflare name servers (amos.ns.cloudflare.com, kay.ns.cloudflare.com). DNS resolution points to IP 104.21.42.154, which is covered by a Let’s Encrypt certificate (issuer YE1). No public malware scanners have flagged the domain, but the absence of detections does not constitute a safety assurance. Infrastructure data shows a recent creation date and reliance on a widely used CDN, a pattern common to short‑lived phishing sites that leverage trusted TLS to evade casual inspection. Current intelligence lacks details on the exact phishing payload, target audience, or compromised credentials, leaving the operational tactics uncertain. Defenders should block DNS resolution for slon7--cc.ru, monitor outbound connections to the associated IP, and incorporate the domain into URL filtering and email gateway rules. Continuous re‑scanning and threat‑intel correlation are recommended to detect any evolution in malicious content or new indicators of compromise.