slon4--atttt[.]ru

This domain, slon4--atttt.ru, poses an elevated risk as a generic phishing site specifically designed as a crypto drainer, targeting visitors of an electric bike e-commerce store. The page title 'Slon4.at — интернет-магазин электровелосипедов и электротранспорта с доставкой по России' suggests it impersonates a legitimate Russian electric bike retailer to trick users into connecting their cryptocurrency wallets or entering sensitive financial information.

PhishDestroy identified several key indicators: the domain was created on March 27, 2026, and registered through FE-RU, a Russian registrar. It resolves to IP address 168.100.8.206 and uses a Let's Encrypt SSL certificate (YE2) for a false sense of security. VirusTotal flags it with 6 out of 95 security vendors marking it as malicious, and it appears on 1 security blocklist. These data points confirm the domain is actively used for credential theft or crypto draining.

To stay safe, users should avoid visiting this domain entirely. If you encounter similar sites, never connect your cryptocurrency wallet or enter login credentials. Use a reputable anti-phishing browser extension and enable two-factor authentication on all accounts. Report any suspicious domains to cybersecurity authorities and run a full antivirus scan if you suspect exposure.