distribute-shib[.]xyz

The domain distribute-shib.xyz, associated with a high threat score of 75/100, presents itself as a generic phishing operation. It is currently down or has been taken down, indicating a potential response to its malicious activities. VirusTotal reports that 4 out of 95 security vendors, including notable names like Forcepoint ThreatSeeker and Fortinet, have flagged this domain as malicious, and it is listed on 2 public blocklists. Google Safe Browsing has not flagged it.

No registrar information is available, suggesting the domain may use privacy protection or has been scrubbed. Additionally, the hosting IP remains unresolved, which could indicate the domain is dormant or has been recently decommissioned. The domain was created on 2026-02-21 and was first detected on 2026-02-26. Given its high threat score and detection status, block the domain at the perimeter and monitor for any re-emergence.