teogux[.]com

The domain teogux.com is currently classified as a high‑risk generic phishing site. Active monitoring records show the domain appears on four independent security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL. A VirusTotal scan reports that 13 of 91 scanned security vendors returned a positive detection, indicating a significant level of confidence among antivirus and URL‑reputation engines that the domain is malicious. DNS resolution points to the IP address 104.21.24.240, which is shared by other known malicious infrastructure observed in recent campaigns.

The domain’s registration details, SSL certificate information, HTTP response codes, and page title have not been disclosed in the available intelligence, so analysts cannot confirm the specific content or the phishing kit employed. Nevertheless, the convergence of multiple blocklist listings, vendor detections, and active blocking by prominent anti‑phishing tools justifies a high‑risk rating. Defenders should immediately add teogux.com to outbound filtering rules and proxy block lists, ensure it is included in IDS/IPS signatures, and consider DNS‑sinkholing the associated IP address.

Continuous re‑scanning on VirusTotal and periodic checks of the four blocklists are recommended to capture any changes in detection status. Organizations that monitor network traffic for connections to 104.21.24.240 should generate alerts, as this address has been linked to other phishing activity. Because the underlying website content has not been analyzed, further investigation—such as sandbox retrieval of the landing page—may reveal additional indicators of compromise that can be shared with the broader security community.