sloin1[.]at

The domain sloin1.at was a generic phishing site designed to deceive users into disclosing sensitive information without impersonating a specific brand or deploying a crypto drainer kit. As of the latest verification, sloin1.at has been taken offline, eliminating the immediate threat. However, users who interacted with the site should remain cautious, as the campaign may resurface under a different domain or with altered tactics.

Technical analysis of sloin1.at revealed limited detection, with only 1 of 95 VirusTotal security vendors flagging the domain. The registrar, Girwork, provided no creation date for the domain. It resolved to the IP address 95.215.108.32, hosted by GLOBAL INTERNET SOLUTIONS LLC in Russia (AS207713). The domain appeared on a single security blocklist, PhishDestroy, and used Cloudflare nameservers (carl.ns.cloudflare.com and luciana.ns.cloudflare.com). The SSL certificate was issued by Let's Encrypt, and the observed page title was 'Один момент…' with an HTTP status of 200.

Users who suspect they interacted with sloin1.at should take immediate action to secure their accounts. For credential phishing, change passwords on all critical accounts, enable two-factor authentication (2FA), and monitor for unauthorized access or fraudulent activity. Report the domain to relevant authorities or platforms, such as Google Safe Browsing, anti-phishing organizations, or local cybersecurity agencies, to aid in broader threat mitigation efforts.