microsoft-team[.]live

The domain microsoft-team.live was registered on July 27, 2026 through Dynadot Inc. It resolves to the IPv4 address 144.172.96.112 and is served by the authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net. A VirusTotal scan performed by 91 antivirus and URL‑reputation vendors returned no detections; the lack of a detection does not constitute evidence of safety. The site’s HTTP response currently presents the page title "Welcome to XAMPP", which does not reference the targeted brand and suggests the underlying server software may be a default XAMPP installation.

The domain is listed on two external blocklists, PhishDestroy and SEAL, indicating that at least two independent security services have flagged it as malicious. The listed scam type is brand impersonation, with Microsoft identified as the targeted brand. No public SSL/TLS certificate information, HTTP status code, Safe Browsing rating, or Open Threat Exchange (OTX) entries were provided in the available intelligence.

Consequently, the precise appearance of the landing page, any credential‑capture forms, or additional malicious payloads remain unknown. Analysts should treat the domain as active and under investigation, enforce network‑level blocking based on the observed IP address and domain name, and monitor for any future changes in reputation signals. Additional scrutiny of traffic to 144.172.96.112 and periodic re‑scanning with updated detection engines are recommended to capture any evolving threat behavior.