slokn2[.]at

PhishDestroy identifies slokn2.at as an active fake login portal phishing domain currently under investigation. The domain resolves to IP 141.98.234.104 and leverages a Let's Encrypt SSL certificate to appear legitimate. VirusTotal shows 1/95 detections, indicating it has evaded current antivirus engines, which is common for newly activated phishing campaigns. This domain was flagged by PhishDestroy with a unique seed 2367c8. Technical indicators include zero detections on VirusTotal (1/95), redirection to 141.98.234.104, and the presence of a valid SSL certificate issued by Let's Encrypt. The domain's infrastructure suggests opportunistic hosting rather than a long-standing malicious setup. Whois data indicates recent creation and low trust scores across domain reputation platforms, increasing the risk of successful user deception. To mitigate fake login portal phishing: avoid entering credentials on slokn2.at or any linked pages. Verify URLs via official channels before submission. Report the domain to your IT security team and use browser tools to inspect SSL certificates and IP reputations. Consider blocking 141.98.234.104 at the network perimeter to prevent access.