slon4-at[.]org
“Slon4.AT â инÑеÑнеÑ-магазин кÑаÑÑового Ñоколада, конÑÐµÑ Ñ…”
Ringkasan bukti
Analysis of slon4-at.org indicates a high-risk phishing domain actively targeting users with a crypto drainer scam. The domain was registered on April 27, 2026, through Cloudflare, Inc., and currently resolves to the IP address 168.100.8.206, hosted in the Netherlands under BL Networks. Infrastructure analysis reveals the use of Cloudflare nameservers (nora.ns.cloudflare.com and todd.ns.cloudflare.com), a Let's Encrypt SSL certificate (E8), and Nginx as the web server technology. The page title, written in Russian, suggests the site operates as an online store for handcrafted chocolate and gift sets, though this may serve as a cover for malicious activity. Security vendors have flagged the domain, with 7 out of 91 engines on VirusTotal detecting it as malicious. The domain appears on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft, further confirming its high-risk status. The site remains active as of July 12, 2026, returning an HTTP 200 status, which indicates it is accessible and operational. While the exact mechanics of the crypto drainer are not yet analyzed, the classification as a crypto drainer scam suggests the domain is designed to trick users into connecting wallets or entering sensitive information, leading to unauthorized fund transfers. Defenders should treat this domain as hostile and implement blocking measures at the DNS or network level. Organizations are advised to monitor for connections to 168.100.8.206 and the domain itself, as well as to review logs for any interactions with Cloudflare-hosted infrastructure matching these indicators. Given the domain's recent registration and active status, continued vigilance is recommended.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | slon4-at.org |
malicious | Sinkholed |
| DNS4EU | slon4-at.org |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi
1 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of slon4-at.org · checked Apr 27, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive