shib-present[.]org

shib-present.org is a generic phishing domain that was taken offline after being identified as a threat. It does not impersonate any specific brand and was not associated with a drainer kit. The domain posed a generic phishing risk, meaning it was designed to trick visitors into providing sensitive information such as login credentials or personal data. As of the report, the site is no longer active, indicating it has been neutralized.

Technical indicators for shib-present.org include detection by 2 of 95 VirusTotal vendors, specifically Fortinet and SOCRadar. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolves to IP address 188.114.96.3, located in the US under AS13335 Cloudflare, Inc. It appears on 1 security blocklist, PhishDestroy, and uses SSL issued by Google Trust Services / WE1. The page title observed was 'PratikPay,' and the site employed Cloudflare and HTTP/3 technologies, returning an HTTP status of 502. Google Safe Browsing did not flag the domain.

To stay safe from generic phishing threats like shib-present.org, users who visited the site should change any passwords entered and enable two-factor authentication on affected accounts. Monitor financial accounts and credit reports for signs of fraud. Report the domain to relevant authorities such as the Anti-Phishing Working Group or local cybercrime units. If any credentials were compromised, consider using a password manager to generate unique, strong passwords for each account.