tge-tea[.]xyz

The domain tge-tea.xyz has been identified as a brand impersonation threat specifically targeting Google. Analysis indicates the site presents a fraudulent login page titled 'Anmelden – Google Konten,' designed to deceive users into disclosing credentials. The domain is currently offline, but prior activity confirms malicious intent under the guise of a legitimate service provider. Infrastructure analysis reveals the domain was created on October 30, 2025, and registered through OwnRegistrar, Inc. It resolves to the IP address 74.125.71.84, though this address may not be exclusively associated with malicious activity. Security assessments show the domain holds a Gridinsoft trust score of 0 out of 100 and appears on two security blocklists. VirusTotal reports indicate that 3 of 95 security vendors flag tge-tea.xyz as malicious. Additional threat intelligence confirms the domain was blocked by ScamSniffer and PhishDestroy, reinforcing its classification as a phishing infrastructure. Current status indicates the domain has been taken offline, reducing immediate risk to users. However, the infrastructure may be reactivated or repurposed. Organizations and individuals are advised to proactively block the domain and associated IP address within network security controls. Users who may have interacted with the site should immediately reset credentials for any accounts accessed during the encounter. Monitoring for related domains registered through the same registrar or resolving to similar IP ranges is recommended to identify potential follow-up threats. Security teams should treat any future appearances of this domain or its indicators as high-risk and respond accordingly.