revoke-eigens[.]xyz

The domain revoke-eigens.xyz has been identified as a phishing infrastructure specifically designed for brand impersonation, targeting Google accounts. Analysis confirms the domain hosted a fake login page titled 'Anmelden – Google Konten,' mimicking Google’s authentication interface to harvest user credentials. The domain is currently offline, but prior activity indicates a deliberate attempt to deceive users into entering sensitive information under false pretenses. Infrastructure analysis reveals the domain was registered through OwnRegistrar, Inc., and created on November 12, 2025. It resolves to the IPv6 address 2a00:1450:400c:c07::54, a technical indicator that may aid in tracking related malicious activity. Security vendors have flagged revoke-eigens.xyz, with 7 out of 95 VirusTotal engines detecting it as malicious. The domain appears on one security blocklist and has been assigned a trust score of 0/100, further corroborating its association with phishing operations. Additional blocking has been implemented by PhishDestroy, reinforcing its classification as a confirmed threat. While revoke-eigens.xyz is currently offline, the infrastructure remains a potential risk for future malicious campaigns. Organizations and users are advised to treat this domain as compromised and implement proactive measures. Network administrators should block the domain and its associated IP address at the perimeter to prevent access. Security teams should monitor for related indicators, including the registrar (OwnRegistrar, Inc.) and the IPv6 address, to identify potential resurgence or lateral movement within phishing networks. Users who may have interacted with the domain should be directed to reset credentials via legitimate Google channels and enable multi-factor authentication to mitigate account compromise risks.