electoral-plum-x813sremvw[.]edgeone[.]app

Analysis indicates that the domain electoral-plum-x813sremvw.edgeone.app is actively involved in high-risk generic phishing activities. The domain was registered on May 23, 2026, through Tencent EdgeOne and is currently resolving to the IP address 43.152.26.58, which is located in Germany. The SSL certificate is issued by DigiCert, Inc., under the DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1. The domain has been flagged by 11 out of 91 security vendors on VirusTotal, suggesting a notable level of suspicion among security professionals. Additionally, the domain appears on one security blocklist and has been blocked by PhishDestroy, further indicating its involvement in malicious activities. The page title, which displays as '네이버 : 로그인', is written in a non-English character set, which could be an attempt to obfuscate the true nature of the site. The HTTP status code 200 confirms that the domain is currently active and accessible. Gridinsoft has assigned the domain a trust score of 0 out of 100, indicating a complete lack of trustworthiness. Defenders should immediately block this domain and monitor for any signs of phishing attempts, such as suspicious emails or redirects to this URL. Further investigation into the exact content and targets of the phishing site is recommended to enhance defensive measures.