slon--4cc[.]ru

This domain, slon--4cc.ru, was registered on March 6, 2026, through REGRU-RU and is currently resolving to the IP address 205.185.113.136. As of July 29, 2026, the domain appears on one security blocklist and is actively blocked by PhishDestroy. Two of ninety-one security vendors on VirusTotal have flagged the domain as malicious, indicating a targeted but limited detection footprint. The nameservers are hosted by reg.ru (ns1.reg.ru and ns2.reg.ru), a common provider for both legitimate and malicious domains.

Analysis indicates the domain is being used for generic phishing activity, though the specific brand or service being impersonated has not yet been confirmed. No page title, SSL certificate details, or HTTP response data are currently available, so the exact content and targeting remain unanalyzed. The infrastructure does not exhibit immediate clustering with known phishing kits or campaigns, though the IP address may host additional malicious domains. Defenders should treat this domain as an elevated-risk phishing asset.

Block access at the network level using the provided IP and domain. Monitor for new detections or changes in hosting, as the domain may shift infrastructure or targeting. If internal logs show connections to this domain, investigate for credential compromise or unauthorized access attempts. Given the limited vendor detections, manual review of related traffic is recommended, particularly for login or authentication pages.