s[.]teams-y[.]com

This domain, s.teams-y.com, was registered on November 25, 2025 through Name SRS AB and is presently taken offline. DNS resolution points to the IP address 172.67.160.91, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are ns1.suspended-domain.com and ns2.suspended-domain.com, both typical of suspended or abandoned domains. The site was flagged by PhishDestroy and appears on a single security blocklist, indicating that at least one external feed has identified it as malicious. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, reinforcing the suspicion of abuse.

VirusTotal analysis shows that 14 of 93 scanning engines flagged the domain, suggesting a moderate level of consensus among anti‑malware products that the site hosts phishing content. The SSL certificate presented is identified only as “WE1”, without further details on issuer or validity period. No public page title or content snapshot is available, so the exact landing page content remains unknown. Defenders should treat any network traffic to s.teams-y.com as malicious.

Recommended actions include adding the domain to DNS blocklists, configuring proxy or firewall rules to deny HTTP/HTTPS connections, and monitoring for any residual connections that may arise from cached credentials or automated tools. Given the Cloudflare front‑end, the underlying hosting may be obscured, so response teams should also consider blocking the associated IP range (172.67.160.0/24) if broader mitigation is required. Continuous observation of related indicators—such as the nameservers and the registrar Name SRS AB—can help identify future campaigns that reuse this infrastructure. Because the site is currently offline, immediate takedown is not possible, but pre‑emptive defenses remain essential to prevent user compromise should the domain be reactivated.