stephanielekeu[.]shop

The domain stephanielekeu.shop was registered on 21 February 2026 and currently reports an offline status. Infrastructure analysis shows the domain resolves to the IPv4 address 15.197.240.20, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. A Go Daddy Secure Certificate Authority – G2 SSL certificate is present, indicating that TLS is correctly configured despite the malicious purpose. Reputation services flag the domain as highly suspicious: Gridinsoft assigns a trust score of 0 out of 100, Scamadviser reports a trust score of 1 out of 100, and the site is listed on a single security blocklist.

PhishDestroy has actively blocked the domain, and the overall detection count on VirusTotal is 16 detections out of 93 scanners, confirming that multiple security engines identify it as malicious. No additional public metadata such as page title or targeted brand has been disclosed, so the precise phishing lure remains unspecified. The observable evidence suggests a generic phishing operation that leverages a recently created domain, a reputable hosting provider, and a valid TLS certificate to increase credibility. Although the site is offline, the underlying hosting IP remains reachable, allowing threat actors to reactivate the payload or clone the infrastructure.

Defenders should add 15.197.240.20 to network-level deny lists, enforce DNS filtering for stephanielekeu.shop, and monitor other Amazon-hosted assets for similar creation dates. Continuous re-scanning on multi-engine platforms is advisable to capture any evolution of the payload or additional indicators of compromise. Organizations employing email security gateways should treat any correspondence referencing this domain as malicious and quarantine related messages.