slon---4-----cc[.]ru

PhishDestroy identifies the domain slon---4-----cc.ru as a credential theft phishing site designed to harvest login credentials from unsuspecting visitors. The domain mimics legitimate services to trick users into entering sensitive information, posing a significant risk to personal and financial security.

Evidence from threat intelligence sources confirms the malicious nature of this domain. VirusTotal reports that 2 out of 95 security vendors flag the domain as malicious. The domain was registered through REGRU-RU on March 28, 2026, and its SSL certificate was issued by Let's Encrypt (E7), which is commonly abused by phishing sites. It appears on 1 security blocklist and was found in 1 AlienVault OTX pulse. The domain currently resolves to IP address 145.249.115.222 but has been taken offline.

Users who have visited this domain should immediately change passwords for any accounts entered on the site and enable two-factor authentication where available. They should also monitor financial accounts for unauthorized activity and consider running a security scan on their devices. PhishDestroy recommends reporting any phishing attempts to relevant authorities and staying vigilant against similar threats.