slon4--c-c[.]ru

This report analyzes the domain slon4--c-c.ru, which is assessed as a high-risk threat based on the provided data. The site is currently offline, preventing confirmation of its page title or specific scam type, but its characteristics indicate it was likely prepared for malicious activity, such as phishing or malware distribution. The threat it poses includes potential credential theft or system compromise if users were to visit and interact with the site.

Technical evidence shows the domain was flagged by 5 out of 95 VirusTotal vendors, including alphaMountain.ai, G-Data, Gridinsoft, and Sophos, and appears on 1 blocklist. It was created on March 28, 2026, and resolves to IP address 188.114.97.3, located in Canada and hosted by CloudFlare, Inc. The SSL certificate is issued by Let's Encrypt with identifier E7. GridinSoft assigns a trust score of 0 out of 100, indicating high suspicion.

The domain is currently marked as DOWN or OFFLINE, meaning it is not accessible. The risk level is high due to the multiple security vendor detections, blocklisting, and zero trust score, suggesting it was designed for harmful purposes despite being inactive at this time.