bloomsniper[.]sbs

The domain bloomsniper.sbs, flagged by three out of 95 vendors on VirusTotal, was swiftly taken down after detection. Its presence on public blocklists, including PhishDestroy's, highlights its malicious nature. The site, registered via NiceNIC International Group Co., Limited, was hosted on an IP managed by Cloudflare, Inc. in the United States.

Despite its offline status, the initial detection on the domain's creation date underscores the rapid response capabilities of threat intelligence operations. The domain's platform risk score of 56 out of 100 indicates a moderate threat level, suggesting that it was designed to deceive users effectively. The lack of an SSL certificate further points to its illegitimacy.

Phishing domains like bloomsniper.sbs exploit the critical time window between registration and widespread detection by antivirus vendors. PhishDestroy's timely identification and inclusion in blocklists mitigate potential harm during this vulnerable period. The swift takedown of bloomsniper.sbs demonstrates the effectiveness of coordinated efforts in combating phishing threats.