tedstststs[.]live

The domain tedstststs.live was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 27 February 2026. It is currently active and resolves to the IPv4 address 188.114.97.3, which is served by Cloudflare nameservers lucy.ns.cloudflare.com and weston.ns.cloudflare.com. Reputation data shows the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal analysis reports that 14 of 95 scanned security vendors flagged the domain as malicious, indicating a moderate level of consensus among scanners.

The limited blocklist presence suggests that the infrastructure is relatively new, consistent with the February registration date. Infrastructure analysis reveals no public SSL certificate information or HTTP status codes in the available intelligence, so the presence of HTTPS or any redirect behavior cannot be confirmed at this time. The lack of a documented page title or brand target means that the specific lure employed by the site remains unverified, although the classification as a generic phishing operation is supported by the vendor detections. Defenders should prioritize immediate containment by adding tedstststs.live to DNS block lists and endpoint deny‑list configurations.

Monitoring of traffic to the associated IP address 188.114.97.3 is advisable, as well as periodic re‑scanning on VirusTotal or similar platforms to capture any changes in detection counts. Because the domain is hosted on Cloudflare, leveraging Cloudflare’s own threat intelligence feeds may provide early warnings of related host activity. Continuous observation of the two authoritative nameservers for any new record changes can also help identify rapid re‑deployment attempts. In summary, the observable evidence points to an active generic phishing infrastructure that warrants proactive blocking and ongoing surveillance.