teams-us[.]live

The domain teams-us.live is currently parked, displaying a Namecheap parking page, yet it poses a significant threat as a Microsoft phishing domain. It has been flagged by one out of 94 vendors on VirusTotal, indicating its potential use in malicious activities. The domain is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, highlighting its recognition as a threat by multiple security entities.

Registered with NameCheap, Inc., and hosted on IP address 198.54.120.79 in the US, teams-us.live was created on March 15, 2026, and detected by PhishDestroy the following day. The platform risk score for this domain is 73 out of 100, suggesting a high likelihood of it being used for phishing attacks targeting Microsoft users. Despite its current dormant status, the domain's association with a known registrar and hosting provider, along with its rapid detection, underscores its potential threat.

Phishing domains like teams-us.live exploit the critical window between domain registration and widespread detection by antivirus vendors. This domain's early identification by PhishDestroy demonstrates the effectiveness of proactive threat intelligence in capturing threats before they become widely recognized. The combination of a parked status and a high-risk score suggests that this domain could be activated for phishing campaigns at any time, making it essential for organizations to remain aware of such emerging threats.