slon-6--6cc[.]ru

This domain, slon-6--6cc.ru, is flagged as a credential theft operation designed to harvest login details, payment information, or personal data from visitors. The site mimics a legitimate Moscow-based wine storage and cellar construction service, using branding elements associated with Slon6.cc to appear authentic. Visitors searching for wine cabinets or custom wine cellars may be tricked into entering sensitive information on fraudulent forms, which threat actors then exfiltrate for financial fraud or identity theft. Analysis indicates this domain was registered on April 24, 2026, through the registrar FE-RU, an uncommon date suggesting potential domain spoofing or typosquatting. It resolves to the IP address 216.203.20.115 and is hosted on an Nginx server with a Let's Encrypt SSL certificate, providing a false sense of security. Only 1 out of 95 security vendors on VirusTotal flagged this domain, highlighting its ability to evade detection. The domain appears on one security blocklist and has been taken offline, but similar infrastructure may still be active. If you visited slon-6--6cc.ru or entered any information on the site, immediate action is required. Disconnect the device from the internet to prevent further data exfiltration. Run a full antivirus scan to detect any malware or keyloggers. Change passwords for all accounts accessed from the same device, prioritizing email, banking, and e-commerce platforms. Monitor financial statements for unauthorized transactions and consider placing a fraud alert with credit bureaus. Report the incident to local cybercrime authorities and provide them with the domain, IP address, and any communication received from the site.