teb8n[.]com

This domain, teb8n.com, is actively flagged as a high-risk credential phishing site targeting users through a campaign identified by the page title 'MWBE-AOAY'. Registered on August 1, 2025, through Dynadot LLC, the domain resolves to IP address 104.21.28.136, a Cloudflare-hosted endpoint utilizing HTTP/3 and HSTS protocols alongside Vue.js for frontend functionality—infrastructure choices consistent with modern phishing operations seeking to evade detection and appear legitimate. Analysis of threat intelligence feeds reveals the domain has been included in 23 AlienVault OTX pulses, indicating broad recognition across security communities. Google Safe Browsing explicitly classifies the site under 'SOCIAL_ENGINEERING', and it is currently blocked by at least three security blocklists, including PhishDestroy and InversionDNS. The SSL certificate is issued by Google Trust Services, providing encrypted connections that may further deceive users into trusting the site. While 15 out of 95 security vendors on VirusTotal have flagged the domain, the exact nature of the phishing content remains unconfirmed as direct page analysis has not been conducted. Defenders are advised to treat this domain as hostile and implement immediate blocking at DNS, proxy, and endpoint levels. Given its continued activity as of July 12, 2026, and the absence of any legitimate use case, the domain should be considered compromised infrastructure with no valid business purpose.