s[.]teams-pa[.]com
“Our website is coming soon”
Ringkasan bukti
This domain, s.teams-pa.com, is actively engaged in brand impersonation phishing targeting Microsoft Teams users. Analysis indicates the site is designed to mimic legitimate Microsoft collaboration portals, likely to harvest enterprise credentials or distribute malicious payloads under the guise of official communication. The domain remains operational as of this report, with no visible takedown efforts despite confirmed malicious activity. Infrastructure analysis reveals the domain was registered on February 17, 2026, through REGRU-RU, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.), a network commonly leveraged to obfuscate malicious infrastructure. The domain currently lacks an SSL certificate, increasing the likelihood of interception or tampering during transmission. Detection metrics show 12 of 95 security vendors on VirusTotal flagging the domain as malicious, while only one blocklist (PhishDestroy) has incorporated it into active filtering. The page title, 'Our website is coming soon,' suggests either a placeholder for imminent malicious deployment or an attempt to evade automated detection by presenting minimal content. The elevated risk level is justified by the combination of brand impersonation, low detection coverage, and the use of bulletproof hosting infrastructure. Organizations are advised to implement immediate network-level blocking of s.teams-pa.com and its resolving IP (188.114.97.3) at the firewall or DNS filtering layer. Security teams should monitor for internal traffic to this domain, particularly from endpoints with Microsoft 365 integrations. Given the domain's recent registration date (February 2026), it is likely part of a broader campaign; thus, retrospective log analysis for February 17 onward is recommended to identify potential prior exposure. End-user awareness training should emphasize the risks of unsolicited Teams-related communications, especially those directing users to non-Microsoft domains.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260224-15C281- Judul halaman yang direkam
- Our website is coming soon
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: Abuse policy + ICANN contractual obligations; phishing classified as bad-faith use in UDRP; domains may be suspended/removed
Applicable Laws: Criminal Code RF Art.159 (fraud), Art.272 (illegal access), Art.273 (malware creation), Art.274.1 (critical infrastructure interference)
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | s.teams-pa.com |
malicious | Sinkholed |
| Hagezi Threat Feed | s.teams-pa.com |
malicious | Sinkholed |
| OpenDNS | s.teams-pa.com |
phishing | Phishing Block |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 13/08/2026
Linimasa deteksi
-
VirusTotal
12 → 11
-
VirusTotal
12 → 11
-
VirusTotal
12 → 11
-
VirusTotal
12 → 11
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Registration: teams-pa.com
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain teams-pa.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of s.teams-pa.com · checked Mar 2, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive