ateesafinancialstewards[.]com

Analysis of ateesafinancialstewards.com confirms it as an active financial phishing domain targeting the ATEESA brand, as indicated by its page title 'ATEESA Financial Stewards'. The domain was registered on January 9, 2026, through Global Domain Group LLC and currently resolves to IP address 198.251.84.200. Infrastructure analysis reveals the use of LiteSpeed and HTTP/3 technologies, which are not inherently malicious but are frequently employed in phishing operations for performance and evasion. The domain appears on 16 threat intelligence pulses in AlienVault OTX and is blocked by at least two security blocklists, including PhishDestroy and BLP-Malware. Six of 95 security vendors on VirusTotal have flagged the domain, though the specific detection rules or signatures are not detailed in available intelligence. Gridinsoft assigns the domain a trust score of 35 out of 100, further indicating a high-risk classification. No concrete evidence links this domain to a specific phishing kit or campaign beyond its generic classification as a financial phishing site. The exact content and functionality of the site remain unanalyzed, but the combination of brand impersonation, recent registration, and multiple security vendor detections strongly suggests malicious intent. Defenders should treat this domain as a confirmed phishing threat, block resolution to its IP address, and monitor for related infrastructure or domains registered through the same registrar. The domain remains active as of July 12, 2026, and continued vigilance is recommended.