# teams-download.com — SUSPICIOUS

> teams-download.com is a malicious site distributing fake Microsoft Teams installers to steal credentials.

## Summary
PhishDestroy identifies teams-download.com as an active generic phishing domain impersonating Microsoft Teams to distribute malicious installers. The domain is currently under investigation but remains accessible to potential victims.    This domain was flagged by 0 of 95 VirusTotal vendors, indicating it has not yet been widely detected despite its malicious purpose. Registered on December 04, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 188.114.97.3 and holds an SSL certificate issued by Google Trust Services. The recent creation date and lack of detections suggest a newly deployed threat with potential for rapid expansion.    Users should immediately avoid accessing or downloading files from teams-download.com, as it likely serves malicious payloads under the guise of legitimate software. Security teams are advised to block the domain at the network level and monitor for related infrastructure. Given the domain's low detection rate, proactive blocking of 188.114.97.3 is recommended to prevent initial access. Report any encounters to PhishDestroy for further analysis and threat intelligence integration.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-04 09:34:52
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/teams-download.com
- PhishDestroy: https://phishdestroy.io/domain/teams-download.com/
- LLM endpoint: https://phishdestroy.io/domain/teams-download.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/teams-download.com/
Last updated: 2026-04-02