slon---4--at[.]ru

The domain slon---4--at.ru has been assessed as posing an elevated risk and is categorized under the generic_phishing threat type. This domain was taken offline and is no longer active, but it remains important to monitor due to its history and potential for reuse.

Analysis indicates that slon---4--at.ru was flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus among the security community regarding its malicious nature. The domain was registered through REGRU-RU and resolves to the IP address 145.249.115.222. It was created on March 28, 2026, and has appeared on one security blocklist. Additionally, the domain was found in one threat intelligence pulse on AlienVault OTX, further corroborating its involvement in phishing activities. The domain is currently blocked by PhishDestroy, which adds another layer of protection for users who might encounter it.

To mitigate the risks associated with this generic_phishing domain, it is recommended that organizations and individuals implement the following steps: ensure that all devices and networks are configured to block traffic to the IP address 145.249.115.222. Regularly update security blocklists to include slon---4--at.ru and monitor for any signs of its reactivation. Conduct user training and awareness programs to recognize and report phishing attempts, and implement multi-factor authentication (MFA) for all critical accounts. Additionally, deploy reputable anti-phishing solutions and maintain up-to-date threat intelligence feeds to stay informed about emerging phishing domains and techniques.