ai-teams10[.]com

Analysis of the domain ai-teams10.com indicates it is an active phishing infrastructure targeting users through a Microsoft Teams-themed lure. Registered on March 11, 2026, via HOSTINGER operations, UAB, the domain resolves to IP 2.57.91.215 (AS47583, Hostinger International Limited, Cyprus). Nameservers ns1.dns-parking.com and ns2.dns-parking.com are configured, a pattern observed in other phishing campaigns leveraging low-cost or compromised DNS services. The domain is flagged on three security blocklists and appears in 22 AlienVault OTX threat intelligence pulses, suggesting broader detection within the security community. A 301 HTTP redirect is currently active, though the destination remains unclear due to a 403 Forbidden response on the root path. MX records point to mx1.hostinger.com and mx2.hostinger.com, which may be used for credential harvesting via email or to lend legitimacy to the operation. One security vendor on VirusTotal has flagged the domain, though the absence of additional detections does not preclude malicious intent. The SSL certificate, issued by Let’s Encrypt, is valid and commonly used in both legitimate and malicious infrastructure. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as high-risk. Defenders should treat ai-teams10.com as active phishing infrastructure. Block resolution at the DNS or network level, and monitor for related domains using the same nameservers, registrar, or IP range. The domain’s Microsoft Teams branding, combined with its registration and hosting patterns, aligns with known phishing tactics targeting enterprise users. Further investigation into the redirect chain and email infrastructure is recommended to assess the full scope of the campaign.