s[.]teams-kk[.]com

Analysis of s.teams-kk.com shows a newly registered domain (created 21 Feb 2026) that was used to host a gaming‑related impersonation page targeting Steam users. The site presented a page titled “Sign In”, consistent with the known impersonation of the Steam brand. The hosting infrastructure resolves to IP 172.67.207.214, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The domain has been added to at least one security blocklist and is listed by PhishDestroy as blocked.

On VirusTotal the domain received detections from ten of ninety‑three scanners, indicating that a minority of AV engines flagged it as malicious. The SSL certificate presented is identified as “WE1”; while the certificate itself is valid, the low Gridinsoft trust score of 0 / 100 suggests the site fails basic reputation checks. The classified scam type is “Gaming Scam”, aligning with the Steam impersonation attempt.

The site is currently offline, which limits further content analysis, and no additional evidence such as page screenshots or credential harvesting behavior is available. Defenders should add s.teams-kk.com to URL filtering rules, monitor for any traffic to the associated Cloudflare IP, and ensure that credential‑dumping detection mechanisms are tuned for Steam login attempts. Incident response teams should also check for any accounts that may have been compromised through similar domains and advise users to verify the authenticity of Steam login URLs before entering credentials.