si[.]team-al[.]com

This domain, si.team-al.com, is identified as a high-risk phishing site designed to mimic Microsoft login portals. Analysis indicates it employs credential harvesting techniques typical of fake login pages, likely targeting corporate or personal Microsoft account credentials. No direct association with known crypto drainer kits or brand-specific impersonation beyond Microsoft has been confirmed, but the infrastructure aligns with common phishing campaigns leveraging trusted brand names to deceive users. Technical indicators confirm the domain’s malicious nature. VirusTotal detects si.team-al.com as malicious, with 9 out of 95 security vendors flagging it. The domain was registered on June 23, 2026, through TUCOWS.COM, CO., and currently resolves to the IP address 172.67.191.136. It appears on one security blocklist, though Google Safe Browsing (GSB) status remains unconfirmed. The creation date suggests recent deployment, a common tactic to evade detection and maintain operational longevity. As of the latest assessment, si.team-al.com remains active, posing an ongoing threat to users. No takedown or sinkholing actions have been observed, and the domain continues to resolve to its assigned IP. Organizations and individuals are advised to block the domain at the DNS or firewall level and implement browser-based protections to prevent access. Users who may have interacted with the site should rotate credentials immediately, particularly for Microsoft accounts, and monitor for unauthorized access. The domain’s persistence and vendor detections underscore the need for continued vigilance.