teams[.]us[.]org

The domain teams.us.org is currently classified as a high‑risk generic phishing site and remains active as of the 29 July 2026 reporting date. Network resolution points the domain to the IPv4 address 45.45.217.242, which is hosted on infrastructure that serves multiple malicious actors. The authoritative name servers listed for the domain are ns3.my-ndns.com and ns4.my-ndns.com, a pair that appears on three public security blocklists. Independent threat‑intelligence feeds have also flagged the domain; it is listed by PhishDestroy, MetaMask, and SEAL as a malicious endpoint.

VirusTotal analysis shows that 12 out of 91 scanned security engines have raised detections against the domain, reinforcing the consensus that it is being used for phishing. No additional metadata such as SSL certificate details, HTTP response codes, or page titles have been published, leaving the exact content of the site unverified. The lack of publicly available information on the payload or the targeted brand means that defenders cannot rely on signature‑based indicators beyond the domain and IP address observed. However, the convergence of blocklist listings, multiple vendor detections, and the presence of dedicated anti‑phishing blocks suggests a coordinated campaign that likely harvests credentials or redirects victims to malicious third‑party services.

Defenders should add teams.us.org and its resolved IP 45.45.217.242 to network‑level deny lists, enforce DNS sink‑holing for the listed name servers, and monitor for outbound connections to the same address. Because the site’s hosting environment is shared, broader subnet blocking may be warranted after confirming no legitimate services reside on the same range. Ongoing visibility into blocklist updates will help maintain accurate protective controls.