slon7ccc[.]ru

The domain slon7ccc.ru, now offline, is flagged as malicious by 2 out of 94 VirusTotal vendors. It is hosted in Russia under the IP address 95.163.244.138, managed by "Domain names registrar REG.RU", Ltd. This phishing domain exploits Let's Encrypt SSL certificates to appear legitimate, a common tactic among cybercriminals to deceive users.

slon7ccc.ru was operational before being taken down, and it was listed on one public blocklist, specifically by PhishDestroy. The use of Let's Encrypt for SSL certification is a notable aspect, as it provides free and easy access to secure certificates, which are often misused by threat actors to add a veneer of legitimacy to their malicious sites.

The domain's creation date in 2026 suggests a typographical error, as it is currently offline. This anomaly highlights the importance of verifying domain registration details for threat intelligence accuracy. The quick takedown of slon7ccc.ru underscores the effectiveness of collaborative efforts between cybersecurity entities to mitigate phishing threats. Despite its offline status, the domain's brief activity period serves as a reminder of the rapid deployment and exploitation of phishing domains in the digital landscape.