slon8[.]at

This domain, slon8.at, is currently active and classified as a generic phishing site with an elevated risk rating. Registration data indicates it was created through the Austrian registrar Key-Systems GmbH, and the authoritative name servers are ns1.sedoparking.com and ns2.sedoparking.com, which are commonly used for monetized parking services. DNS resolution points to the IPv4 address 64.190.63.222; no additional hosting details such as ASN or geographic location are disclosed in the available intelligence.

VirusTotal analysis shows that 4 of 91 security vendors have flagged the domain, suggesting a minority of scanners have identified malicious behavior. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy feed, providing independent confirmation of its malicious nature. No public SSL/TLS certificate information, HTTP status codes, or page title metadata have been released, so the exact content and any credential‑capture mechanisms remain unknown.

Given the limited but consistent indicators—registrar, parking name servers, malicious IP resolution, vendor detections, and blocklist presence—defenders should treat slon8.at as a hostile resource. Recommended mitigations include adding the domain to DNS‑level deny lists, enforcing web‑proxy filtering, and monitoring outbound connections for attempts to resolve or contact 64.190.63.222. Continuous re‑evaluation is advised, as additional analysis of the landing page or associated infrastructure could reveal further threat actors or payloads.