teamszaz[.]com

Analysis dated July 24, 2026 identifies teamszaz.com as an active Microsoft brand‑impersonation infrastructure that has been taken offline. The domain resolves to the IPv4 address 172.245.67.31, which is hosted by HostPapa (AS36352) in the United States. Registration data show the domain was created on September 24, 2025 through Domain International Services Limited, and the authoritative name servers are ns1.domainnamedns.com, ns2.domainnamedns.com, ns3.domainnamedns.com, and ns4.domainname. No TLS certificate was observed, indicating the site was served over plain HTTP when it was reachable. The page title returned by the server was “Teams官网 - Teams中文版”, a Chinese phrase that references Microsoft Teams, confirming the intent to masquerade as an official Microsoft service.

Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist, where it has been listed by PhishDestroy. AlienVault OTX references the domain in one threat‑intel pulse, further corroborating malicious use. VirusTotal scans recorded 11 detections out of 95 participating scanners, reinforcing the suspicion that the site hosted malicious content or credential‑harvesting pages. Risk is classified as elevated, and the current offline status suggests the operators have withdrawn the site, possibly to evade takedown or to redeploy elsewhere.

Uncertainty remains regarding the exact payload delivered, the phishing kit employed, and whether additional related domains exist, as no further technical artefacts have been published. Defenders should continue to monitor the associated IP address and name‑server range for re‑activation, block the domain and IP at perimeter defenses, and add the domain to internal blacklists. Threat‑intel platforms should be updated with the observed indicators of compromise, including the domain name, IP address, registration details, and the observed page title.