4slon5-cc[.]ru

The domain 4slon5-cc.ru was registered on 12 May 2026 and is presently active. DNS resolution points to IP address 216.203.20.115, which is geolocated to the Netherlands and associated with the BL Networks hosting provider. The site presents a valid TLS certificate issued by Let’s Encrypt (E7), indicating that HTTPS traffic is encrypted. An HTTP request returns status code 200, confirming that the web server is responding. The page title retrieved from the site is "slon5.cc — Реставрачия советских синтезаторов ". No additional content analysis is available. Reputation scoring from Gridinsoft assigns a trust value of 0 out of 100, and the domain appears on a single security blocklist. VirusTotal analysis shows that 1 of 92 scanned security vendors flagged the domain, and AlienVault OTX lists it in one threat pulse. The domain is also listed as blocked by the PhishDestroy feed. The combination of recent registration, low trust score, presence on blocklists, and a single vendor detection suggests a high likelihood of malicious phishing activity, though the limited number of detections leaves some uncertainty about the full scope of the campaign. Defenders should block network traffic to 4slon5-cc.ru, monitor DNS queries for the domain, and consider adding the IP address 216.203.20.115 to deny lists. Continuous monitoring of threat feeds for additional indicators related to this infrastructure is recommended to capture any evolution of the campaign.