electrume[.]at

The domain electrume.at is currently flagged as an active phishing site specifically targeting users of the Electrum Bitcoin Wallet. Analysis indicates this infrastructure is designed to impersonate the legitimate Electrum cryptocurrency wallet interface, likely to harvest credentials, private keys, or other sensitive financial data from unsuspecting victims. The domain remains operational and poses a high risk to individuals interacting with cryptocurrency platforms. Infrastructure analysis reveals that electrume.at resolves to the IP address 188.114.96.3 and was registered through Hosting Concepts B.V. / Registrar.eu, as documented by nic.at. Security vendor assessments on VirusTotal show that 7 out of 95 detection engines have flagged this domain as malicious, indicating a moderate but concerning level of consensus among threat intelligence sources. No historical registration data or creation date was provided in the available intelligence, limiting temporal analysis of the domain's lifecycle. The domain's current detection ratio and active status suggest it is part of an ongoing campaign rather than an isolated or abandoned effort. As of the latest assessment, electrume.at remains active and continues to host phishing content. Organizations and individuals are advised to block this domain at the network level and include its associated IP address in firewall or DNS filtering rules. Users who may have interacted with this domain should immediately revoke any credentials or private keys entered on the site, monitor associated cryptocurrency wallets for unauthorized transactions, and conduct a thorough security review of any devices used to access the phishing page. Proactive threat hunting for related indicators of compromise is recommended for enterprise security teams.