# teieperformance.com — MALICIOUS

> teieperformance.com is a credential phishing site impersonating TIBCO, flagged by 17 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies teieperformance.com as an active credential phishing domain posing an elevated risk to potential victims. The domain mimics TIBCO’s branding and infrastructure to deceive users into submitting corporate login credentials.

This domain was flagged by 17 of 95 VirusTotal security vendors, resolves to IP address 138.201.191.209, and was registered on June 26, 2025 through Wild West Domains, LLC using a Let's Encrypt SSL certificate. The site currently appears on multiple threat intelligence feeds due to its active campaign against enterprise users.

Users are advised to avoid interacting with teieperformance.com and report the domain to their security teams. Enterprises should block the domain and IP at the network perimeter. If credentials were entered, immediately rotate passwords and enable multi-factor authentication for affected accounts.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-26 12:54:05
- Registrar: Wild West Domains, LLC
- IP: 138.201.191.209

## Detection Status
- VirusTotal: 17 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/867c6105-185b-4880-83cc-b503fefa35a6
- PhishDestroy: https://phishdestroy.io/domain/teieperformance.com/
- LLM endpoint: https://phishdestroy.io/domain/teieperformance.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/teieperformance.com/
Last updated: 2026-03-28