teddybarza[.]com

The domain teddybarza.com has been identified as a brand impersonation threat specifically targeting Amazon. It is currently offline, but its recent creation on December 7, 2025, suggests it was used in a short-lived phishing campaign. The page title, "Dashboard de Inversiones," indicates it was designed to lure victims with promises of investment returns, a common tactic for crypto drainers impersonating legitimate brands.

According to security data, teddybarza.com was flagged by 2 of 95 VirusTotal vendors, indicating low but notable detection. It was registered through NameCheap, Inc. and resolves to IP 185.199.109.153. The domain appears on 1 security blocklist and was found in 1 AlienVault OTX threat pulse. Its SSL certificate was issued by Let's Encrypt, a free certificate authority often abused by phishers. The domain was created recently, which is a common red flag for malicious sites.

Since the domain has been taken offline, the immediate risk is reduced, but users should remain vigilant. Anyone who encountered teddybarza.com should avoid entering any personal or financial information. It is recommended to verify any suspicious links using PhishDestroy's threat database and to report similar domains to security authorities. Always double-check URLs for misspellings or unusual redirects, and never trust unsolicited investment offers from unknown sources.