slon---4--cc[.]ru

The domain slon4ccru has been identified as posing an elevated generic phishing threat and is currently offline. This domain does not appear to impersonate any specific brand, but it is associated with general phishing activities.

Analysis indicates that the domain slon4ccru has been flagged by 6 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through REGRU-RU and resolves to the IP address 145.249.115.222. It was created on March 28, 2026, and has appeared on 1 security blocklist. The domain's presence in a threat intelligence pulse on AlienVault OTX further corroborates its malicious nature. The low trust score and the number of vendors flagging the domain highlight the need for heightened vigilance.

The domain slon4ccru is currently offline, which may indicate that it has been taken down by the registrar or domain owner. However, it is recommended that organizations continue to monitor for any signs of reactivation. To mitigate potential risks, it is advised to block this domain at the network level and educate users about the signs of phishing attacks. Security teams should also conduct regular audits of network traffic to detect any attempts to access similar domains or IP addresses.