ellemente[.]com

This domain, ellemente.com, is currently under investigation for operating as a fake login portal designed to harvest user credentials. Analysis indicates the site mimics financial service providers or corporate login pages, though the specific impersonated brand has not yet been confirmed. The domain is presently offline, but historical data suggests active phishing campaigns during its operational period. Infrastructure analysis reveals the domain was registered on April 11, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which has been linked to other malicious activities in threat intelligence feeds. Despite its suspicious infrastructure, the domain has not been flagged by any of the 95 vendors on VirusTotal, indicating either a lack of detection or a newly deployed evasion technique. It appears on one security blocklist and has been included in a single threat intelligence pulse on AlienVault OTX, with a Gridinsoft trust score of 0/100, further corroborating its malicious classification. The domain’s current offline status may indicate a temporary takedown or a strategic pause in operations. Organizations and users are advised to treat any prior interactions with ellemente.com as compromised. Network administrators should block the domain and its associated IP (188.114.96.3) at the perimeter, while security teams are recommended to monitor logs for connections to this infrastructure. End-users who may have entered credentials on this site should immediately reset passwords for all associated accounts and enable multi-factor authentication where available. Given the domain’s recent creation date and lack of detection, continuous monitoring of related infrastructure is advised to preempt potential resurgence.