slon-3-3at[.]ru

The domain slon-3-3at.ru has been flagged as a high-risk entity associated with generic phishing activities. Analysis indicates that the domain, created on March 28, 2026, has a Gridinsoft trust score of 0 out of 100, which is a strong indicator of its malicious nature. Additionally, VirusTotal reports that 5 out of 95 security vendors have flagged this domain, highlighting its potential threat level. The domain resolves to the IP address 178.20.45.8 and is currently active, which raises concerns regarding its ongoing operations in the phishing landscape.

Further examination reveals that slon-3-3at.ru is listed on two security blocklists, including PhishDestroy and BLP-Malware, which corroborates its classification as a phishing threat. The domain has been detected in 22 different threat intelligence pulses within AlienVault OTX, suggesting it has been linked to various phishing attempts or campaigns. The presence of an SSL certificate issued by Let's Encrypt is noteworthy; while it may lend an air of legitimacy, it is commonly used by malicious actors to deceive users into believing a site is safe.

Defenders should remain vigilant and consider blocking this domain across their networks and systems to mitigate potential risks. Monitoring for any communications or interactions with this domain should be prioritized, given its active status and the concrete evidence of its malicious use. Continuous threat intelligence gathering and updating security protocols will be crucial in responding to any associated phishing campaigns that may arise from this domain.