teams-gglegendscup[.]com

Analysis of teams-gglegendscup.com as of July 24, 2026 indicates that the domain is presently offline, returning an HTTP 403 Forbidden status and lacking an SSL certificate. The domain resolves to the IPv4 address 92.53.96.105, which is allocated to JSC TIMEWEB in Russia under ASN 9123. Hosting is provided by the TIMEWEB infrastructure, as reflected in the four authoritative nameservers (ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org) supplemented by pns61.cloudns.net. The registration record shows creation on 21 October 2025 via Dominet (HK) Limited, a Hong‑Kong registrar often used for short‑lived malicious domains. The site has attracted attention from multiple security services. Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of abuse.

VirusTotal reports that 15 of 95 scanned security vendors flagged the domain, confirming its malicious reputation. AlienVault OTX lists the domain in 15 distinct threat‑intelligence pulses, and it appears on at least one public blocklist. PhishDestroy has also added the domain to its blocklist, reinforcing the consensus that it is being used for phishing. Publicly available evidence does not disclose the specific phishing lure or target brand; the only visible page element is the generic 403 title. Consequently, the exact credential‑harvesting method or victim profile remains uncertain. No HTTPS service is observable, and the lack of a valid certificate suggests that any credential collection would occur over plain HTTP, increasing the risk of interception.

Defenders encountering traffic to teams-gglegendscup.com should block the domain at perimeter filters and update DNS blacklists accordingly. Network monitoring should alert on connections to the associated IP 92.53.96.105, especially from internal clients that may have previously accessed the domain before takedown. Given the Russian hosting location, consider reviewing outbound traffic policies to AS 9123.