shootasbloodteef[.]com

The domain shootasbloodteef.com was registered on February 21, 2026 through Gname.com Pte. Ltd. and is currently classified as a high‑risk generic phishing site. It appears on a single security blocklist and has been actively blocked by PhishDestroy. The domain is referenced in one AlienVault OTX pulse, and VirusTotal analysis shows that 2 of 95 security vendors have flagged it as malicious, reinforcing its malicious intent.

Infrastructure analysis reveals that the domain resolves to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is handled by Cloudflare name servers alice.ns.cloudflare.com and justin.ns.cloudflare.com, and the site presents a Google Trust Services / WE1 SSL certificate, indicating the use of a reputable certificate authority. The HTTP response is a 301 redirect, and the site serves content over HTTP/3, suggesting a modern delivery stack.

The landing page carries the title "PANEN138 ^ Get in Touch Notre équipe Smart Technology 2026" and is built on a WordPress platform backed by MySQL and PHP. Additional client‑side technologies include Google Analytics, Cloudflare Browser Insights, and generic Cloudflare services. The Gridinsoft trust score of 0/100 reflects an extremely low reputation, and the site’s active status confirms ongoing operation. No further details on the specific credential‑harvesting payload are publicly available, leaving the exact phishing template and target brand ambiguous.

Defenders should block shootasbloodteef.com at the DNS and proxy layers, monitor for outbound connections to the associated IP 188.114.97.3, and enforce strict email filtering for messages referencing the page title or related content. Continuous re‑evaluation of threat feeds is advised, as additional indicators may emerge from further analysis of the WordPress installation or associated Google Analytics identifiers.