ooourteam[.]com

Analysis of ooourteam.com shows that the domain was registered on February 21 2026 and is currently offline. The site presented the page title “OurTeamr” and was identified as a crypto‑related scam that impersonates the DeFi aggregator 1inch. SSL inspection revealed a certificate labeled R11, and the Gridinsoft trust score was recorded at 23 out of 100, indicating low confidence in the site’s legitimacy. Network resolution points to a single IPv4 address 118.107.40.152, which is announced by AS152194 under CTG Server Limited and geolocated to Hong Kong.

The IP address appears on one public security blocklist, and the domain itself was blocked by the PhishDestroy service. VirusTotal scanned the host and 16 of 93 security vendors reported it as malicious. The limited detection footprint suggests that the malicious infrastructure was either short‑lived or quickly taken down. No additional evidence regarding the HTML content, JavaScript payloads, or credential‑harvesting mechanisms has been released, so the exact tactics employed remain unknown.

Defenders should continue to deny traffic to 118.107.40.152, add ooourteam.com to domain‑level blocklists, and monitor for new registrations that reuse the “ooourteam” pattern or target the 1inch brand. Ongoing observation of the ASN and any future certificates issued by the same registrar may reveal re‑use of the hosting environment. Organizations that interact with 1inch services should educate users about the risk of unsolicited links claiming to originate from the brand, and enforce multi‑factor authentication to mitigate credential compromise. Threat intelligence platforms should record the seed identifier c04599 to correlate future activity with this observed infrastructure.