slon2cc-gate[.]ru

PhishDestroy identifies slon2cc-gate.ru as an active domain engineered for cryptocurrency theft through impersonation of legitimate wallet services such as MetaMask. The site employs deceptive branding and social-engineering tactics to trick users into divulging private keys or seed phrases, enabling direct access to victim wallets and funds. Analysis confirms this domain resolves to 188.114.97.3 and is currently blocked by MetaMask’s threat intelligence systems, preventing access to the fraudulent interface. Users attempting to visit the page will encounter immediate warnings, reducing but not eliminating risk of accidental exposure. This domain was flagged by PhishDestroy on February 23, 2026, the same day of its RU-CENTER registration. Independent assessment shows slon2cc-gate.ru is identified as malicious by 4 out of 95 security vendors on VirusTotal and appears on one public blocklist. The site uses a Let’s Encrypt SSL certificate to appear legitimate, while its infrastructure is hosted on a bulletproof-friendly IP address (188.114.97.3) known for hosting fraudulent services. The combination of low detection rate, recent registration, and immediate blocking by a major wallet provider underscores elevated threat potential and the need for heightened user vigilance in the crypto ecosystem. If you have visited slon2cc-gate.ru, immediately revoke any permissions granted to the site, transfer remaining assets to a clean wallet, and scan all connected devices for malware. Do not re-enter seed phrases or private keys on any page linked from this domain. Report the domain to your wallet provider and consider a full device audit. Monitor wallet activity for unauthorized transactions and enable multi-factor authentication where possible. Stay cautious: crypto phishing sites evolve quickly, and even briefly visited pages can result in irreversible losses.