slon--4--cc[.]ru

The domain slon--4--cc.ru was registered through the REGRU-RU registrar and created on March 06, 2026. Its authoritative name servers are ns1.reg.ru and ns2.reg.ru, both listed with the ".reg.ru" suffix. DNS resolution points the domain to the IPv4 address 205.185.113.136. The IP address is currently listed on one public security blocklist and the domain itself is flagged by the PhishDestroy blocklist.

VirusTotal analysis shows that four of ninety‑one scanned security vendors have reported the domain as malicious, indicating a low‑to‑moderate detection consensus among scanners. The domain is classified as a generic phishing threat with an elevated risk rating and remains active as of the report date, July 29, 2026. Available intelligence does not disclose additional infrastructure such as ASN, hosting provider, SSL certificate details, or HTTP response codes, leaving those aspects unverified. No public page title, brand targeting, or phishing kit information has been published, so the exact content of the site cannot be confirmed at this time.

The limited detection footprint—four vendor flags and a single blocklist entry—suggests that the malicious infrastructure may be in an early deployment stage or employing evasion techniques that have not yet attracted broader scanner attention. Defenders should add slon--4--cc.ru to local deny‑lists and block outbound connections to the associated IP address 205.185.113.136. Monitoring of DNS queries for the domain and its name servers is recommended, as is periodic re‑scanning with multiple sandbox services to capture any evolving payloads. Because the registrar and name servers are shared with many legitimate Russian‑based sites, any remediation actions that target the hosting environment must be carefully scoped to avoid collateral impact on unrelated domains.