fintechelitepro[.]sbs

Fintechelitepro.sbs was registered on March 10, 2026 through Dynadot LLC. The domain resolves to IP 198.251.84.200, which is advertised as belonging to AS53667 FranTech Solutions and is geolocated in the United States. The site presents a TLS certificate issued by Let’s Encrypt (R12) and returns an HTTP 302 redirect on the initial request, with the page title “Fintech Elite Pro” displayed after redirection. DNS analysis shows the domain is served by four name servers (ns5.asurahosting.com, ns6.asurahosting.com, ns5.my-control-panel.com, ns6.my-contro). The sole MX record points back to the domain itself, a pattern often used to receive victim‑generated email. Server‑side technologies identified include Bootstrap, LiteSpeed web server, jQuery, OWL Carousel, Slick, Smartsupp live‑chat widget, and HTTP/3 support, indicating a modern front‑end stack. Multiple threat‑intel sources have labeled the site as a generic phishing operation. VirusTotal records 10 of 95 security scanners flagging the domain, and at least one public blocklist currently lists it. PhishDestroy has already blocked the domain, yet its status remains active. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. No public evidence of the specific credential‑stealing landing page has been captured, leaving the exact lure and targeted brand ambiguous. Defenders should add 198.251.84.200 and fintechelitepro.sbs to network and email blocklists, monitor DNS queries for the associated name servers, and enforce TLS inspection to detect the redirect behavior. Security teams should also inspect inbound mail for messages originating from the domain’s MX host, and consider sinkholing the IP to disrupt any ongoing phishing campaigns. Continuous re‑evaluation is advised as further indicators may emerge.