s[.]team-lo[.]com

s.team-lo.com is a subdomain of team-lo.com. PhishDestroy first observed the hostname on Feb 26, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, Google Safe Browsing, DNS security resolvers, and Cloudflare Radar. VirusTotal recorded 17 detections among 95 engines: ADMINUSLabs, BitDefender, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safebrowsing, Kaspersky, Lionic, Phishing Database, Seclookup, SOCRadar, Sophos, VIPRE, Webroot, Yandex Safebrowsing on Feb 22, 2026 at 02:02 UTC. Google Safe Browsing flagged the domain: Social Engineering on Mar 2, 2026 at 20:49 UTC. DNS security checks returned 2 blocking results across 14 tested policies: Cloudflare Family, Cloudflare Security; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:22 UTC. PhishStats returned no feed match on Mar 1, 2026 at 22:10 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:23 UTC; content was unavailable. Registration records for the registrable domain team-lo.com list Web Commerce Communications Limited as the registrar and Feb 21, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 194.87.216.152 on AS215540 (GCS-AS GLOBAL CONNECTIVITY SOLUTIONS LLP, GB). The IP and ASN identify shared CDN edge infrastructure; the origin server is not established by this address. The stored server header is uvicorn. DOM analysis on Jul 29, 2026 at 04:14 UTC returned 83/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt / E7 as the certificate issuer with validity through Nov 18, 2025; checked Mar 15, 2026 at 08:03 UTC.

The record contains 4 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.