slonn4cc[.]ru

Analysis of slonn4cc.ru shows a newly registered domain created on March 13, 2026 through the REGRU-RU registrar. The domain is delegated to the standard Russian registrar name servers ns1.reg.ru and ns2.reg.ru. DNS resolution points to the IPv4 address 205.185.113.136, which is currently listed on at least one external security blocklist and has been actively blocked by the PhishDestroy mitigation service.

VirusTotal scans indicate that four of ninety‑one scanned security vendors flagged the domain, suggesting that automated detection engines have identified malicious characteristics, although the specific signatures or payloads were not disclosed. The domain appears on a single public blocklist, reinforcing the view that it is being tracked as a phishing infrastructure. No public evidence has been observed regarding SSL certificate details, HTTP response codes, page title, or brand targeting, so the precise content and victim lure remain unknown.

The limited but consistent indicators—recent registration, registrar association, malicious IP resolution, blocklist presence, and multi‑vendor detection—justify an elevated risk rating. Defenders should add the domain and its resolving IP to outbound filtering rules, monitor DNS queries for the associated name servers, and ensure that any email or web traffic to slonn4cc.ru is blocked or sandboxed. Continuous re‑evaluation is advised as additional telemetry, such as page content or victim reports, becomes available.