slon1at[.]at

This domain, slon1at.at, is identified as a phishing site designed to impersonate a legitimate project platform under the name slon4.at. The site poses a risk of credential theft, malware distribution, or other fraudulent activities targeting visitors who believe they are accessing an official project resource. Analysis of the page title, slon4.at — сайт проекта slon4.at, suggests an attempt to mimic a Russian-language project site, potentially tricking users into entering sensitive information or downloading malicious files. Infrastructure analysis reveals multiple technical indicators confirming its malicious nature. The domain was registered on March 28, 2026, through REG.RU, a registrar frequently associated with abusive domains. VirusTotal detection shows 5 out of 95 security vendors flagging slon1at.at as malicious, indicating a consensus among multiple threat intelligence sources. The site resolved to the IP address 188.114.97.3 and employed Cloudflare for hosting and DDoS protection, a common tactic to obscure the true origin of phishing infrastructure. Additionally, it used a Let's Encrypt SSL certificate to present a false sense of security, while being listed on one security blocklist and assigned a trust score of 0/100 by Gridinsoft. Users who visited slon1at.at should take immediate action to mitigate potential risks. If any credentials were entered, change passwords for all accounts where the same or similar credentials were used, prioritizing financial, email, and work-related services. Run a full system scan using updated antivirus software to detect and remove any malware that may have been downloaded. Monitor financial statements and accounts for unauthorized activity, and enable multi-factor authentication wherever possible to add an extra layer of security. If the site was accessed on a corporate device, report the incident to the IT or security team to prevent potential lateral movement within the network.