slon--4---at[.]ru

PhishDestroy identifies slon--4---at.ru as a confirmed phishing domain with an elevated risk level. This generic phishing threat was designed to deceive users into revealing sensitive information, such as login credentials or financial data. The domain was registered on March 28, 2026, through REGRU-RU, and its short lifespan is typical of malicious sites that operate briefly before being taken down. Currently offline, it was flagged by 1 security blocklist and appeared in 1 threat intelligence pulse on AlienVault OTX.

Technical indicators further confirm the threat: VirusTotal shows 2 out of 95 security vendors flagging this domain as malicious, while the SSL certificate issued by Let's Encrypt (E8) provided a veneer of legitimacy. The domain resolved to IP address 145.249.115.222, which may be associated with other malicious activities. These data points, combined with the domain's registration details and blocklist presence, underscore the need for caution. PhishDestroy's analysis leverages this intelligence to warn users against any engagement.

To stay safe, users should never click links from unsolicited messages or emails directing to slon--4---at.ru. If any credentials were entered on this site, change them immediately and enable two-factor authentication on all accounts. Report any phishing attempts to relevant authorities and use PhishDestroy to verify the safety of unknown domains. Always double-check URLs for subtle misspellings or unusual patterns, as this domain's structure suggests an attempt to impersonate legitimate services.