slons3at[.]ru

As of July 29, 2026, slons3at.ru is actively associated with an elevated generic phishing threat. The domain was registered through the REGRU-RU registrar with nameservers ns1.reg.ru and ns2.reg.ru, indicating hosting and registration within the Russian domain space. It was created on February 28, 2026, and currently resolves to the IPv4 address 205.185.113.136. Detection data shows that 2 out of 91 security vendors have flagged slons3at.ru as malicious, and it appears on at least one known security blocklist, specifically listed by PhishDestroy. The single blocklist appearance signals that detection is not yet widespread among all threat intelligence sources, but the involvement of dedicated anti-phishing infrastructure confirms risk.

At present, there are no public details regarding SSL certificate configuration, HTTP status code, page title, or targeted brands, and the domain’s specific content has not been independently reviewed. The lack of additional intelligence limits the scope of attribution or association with a particular phishing kit or campaign beyond a generic threat classification. The detection by multiple security vendors and its presence on a blocklist nevertheless support the assessment that this domain is currently being used for malicious purposes.

Defenders are advised to block all access to slons3at.ru across corporate and personal networks and to update relevant threat detection systems with the provided indicators: domain slons3at.ru and IP address 205.185.113.136. Security teams should monitor for any related indicators of compromise and consult updated blocklists, as further detections may emerge over time. Continuous monitoring is recommended due to the domain’s recent creation and ongoing status as an active threat resource.