slon-3--3at[.]ru

PhishDestroy has identified slon-3--3at.ru as a generic phishing domain with an elevated risk level. This domain was created on March 28, 2026, and is currently offline, but it was designed to mimic a Russian specialty coffee online store. The page title “Slon3.at — интернет-магазин specialty-кофе Ñ Ð´Ð¾Ñтавкой по РоÑÑии” suggests the site impersonated a legitimate coffee retailer, likely to harvest payment details or login credentials from unsuspecting customers.

Several technical indicators support this assessment. The domain resolves to IP address 168.100.8.206 and appears on at least one security blocklist. VirusTotal reports that 2 out of 95 security vendors flag this domain as malicious. AlienVault OTX also includes it in one threat intelligence pulse, indicating community awareness. The SSL certificate was issued by Let's Encrypt (E8), which is common for both legitimate and malicious sites. The domain was created relatively recently, which is often a red flag for phishing operations.

Users who encountered slon-3--3at.ru before it was taken offline should monitor their financial accounts for unauthorized transactions. If any credentials were entered on the site, they should be changed immediately, especially if reused elsewhere. PhishDestroy recommends avoiding interaction with suspicious coffee delivery offers and always verifying URLs by typing the official store address directly into the browser. For further protection, enable two-factor authentication on all accounts and report any phishing attempts to relevant authorities.