teresaquintana[.]es

This domain, teresaquintana.es, is currently classified as a high‑risk generic phishing site and remains active as of 12 July 2026. The web server returns an HTTP 301 redirect and hosts a site whose title is “Inicio | TERESA QUINTANA atelier”. The domain resolves to 87.98.229.149, an address located in France and owned by ASN 16276 (OVH SAS). Nameservers ns1.dondominio.com and ns2.dondominio.com are authoritative for the zone. The underlying infrastructure shows a typical LAMP‑style stack: WordPress, MySQL, PHP, and Nginx are detected, alongside client‑side libraries such as jQuery, jQuery Migrate, Google Tag Manager, and Google Analytics. The site is protected by a Let’s Encrypt certificate (R13). Registration details indicate the domain was provisioned through ES‑OVH, confirming the same hosting provider that supplies the IP address. Threat‑intelligence sources reinforce the malicious assessment. AlienVault OTX lists the domain in sixteen separate pulses, and VirusTotal reports fifteen out of ninety‑five security vendors flagging it as malicious. The domain appears on two public blocklists and is explicitly listed by PhishDestroy and PhishingDB. Gridinsoft assigns a trust score of zero out of one hundred, underscoring the consensus of danger across multiple scanners. Defenders should treat teresaquintana.es as a confirmed phishing vector. Immediate actions include adding the domain and its resolved IP address to network deny lists, enforcing URL filtering, and ensuring email gateways block any messages that reference the domain. Continuous monitoring of the associated IP range and periodic re‑scanning with updated threat feeds are advised to capture any potential infrastructure changes. Where possible, feed the indicator set back to threat‑sharing platforms to improve community awareness.