slokn1[.]at

PhishDestroy has flagged the domain slokn1.at as a credential theft threat masquerading as a legitimate Russian building materials review platform, СтройКаталог. The domain is currently offline, but users should remain vigilant as it could be reactivated or used in future campaigns. The site was designed to harvest login credentials and other sensitive information from unsuspecting visitors, leveraging the trust associated with the СтройКаталог brand.

Technical analysis reveals that slokn1.at was registered on March 28, 2026, and resolves to IP address 141.98.234.104. The domain uses a Let's Encrypt / R12 SSL certificate, which is common for malicious sites seeking to appear legitimate. It appears on at least one security blocklist, and VirusTotal data shows that 1 out of 95 security vendors have flagged it as malicious. This low detection rate highlights the importance of proactive threat intelligence and user awareness.

The domain is currently taken offline, but PhishDestroy recommends that users and organizations block any traffic to slokn1.at and its associated IP address. If you have visited this site, change any credentials that may have been exposed and monitor for suspicious activity. Implement web filtering and educate users about credential theft risks, especially those involving localized brand impersonation.