teams[.]microsofteams[.]top

The domain teams.microsofteams.top was registered on September 24, 2025 through Gname.com Pte. Ltd. and is currently listed as taken offline. Infrastructure analysis shows the domain resolves to IP address 172.245.67.31, which belongs to AS36352 operated by HostPapa and is geolocated in the United States. The authoritative nameservers a7.share-dns.com and b7.share-dns.net are typical of shared hosting services and provide no additional legitimacy. No SSL certificate was observed for the site, indicating that any traffic to the domain would occur over unencrypted HTTP.

The page title returned by the server, "Teams官网 - Teams中文版," suggests a direct attempt to mimic Microsoft Teams, aligning with the recorded brand impersonation of Microsoft. The scam type is identified as a tech support scam, consistent with the observed use of the Microsoft brand in the title. Reputation checks reveal a Gridinsoft trust score of zero out of one hundred, confirming a lack of trust from that vendor. VirusTotal analysis recorded twelve positive detections out of ninety‑five scanning engines, reflecting a moderate level of malicious classification across security vendors.

The domain appears on a single public blocklist and has been blocked by the PhishDestroy service, further confirming its malicious intent. Defenders should continue to block the resolved IP address 172.245.67.31, add the domain to local deny lists, and monitor for any future re‑registration attempts. Because the site is offline, active harvesting of credentials is not currently possible, but the infrastructure indicates a prepared campaign that could be re‑activated. Continuous observation of the registrar Gname.com Pte. Ltd. and the associated nameservers is recommended to detect any resurgence of the impersonation activity.