# PhishDestroy domain threat record: s.team-jr.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/s.team-jr.com/ Machine-readable companion: https://phishdestroy.io/domain/s.team-jr.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 15:28:43 UTC - Last availability or vendor check: 2026-10-21 15:38:55 UTC - Stored record updated: 2026-10-21 15:46:58 UTC - VirusTotal detections in the stored snapshot: 4/92 - Independent public blocklist matches in the stored snapshot: 1 - Matching public blocklists: OpenPhish - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Steam ## Stored infrastructure - Observed IP address: 188.114.97.3 - Registrar in stored WHOIS data: Dominet (HK) Limited - Registrar country in stored WHOIS data: US - Registration date in stored WHOIS data: 2026-10-13 07:16:31 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15f1c-a585-70e9-b579-f8a45ed77171/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/s.team-jr.com - Certificate Transparency search: https://crt.sh/?q=%25.s.team-jr.com - Web Archive lookup: https://web.archive.org/web/*/https://s.team-jr.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/zTvv8pkV/b5b31ef6d8ef.png Captured: 2026-10-21 15:38:55 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a15f1c-a585-70e9-b579-f8a45ed77171.png Captured: 2026-10-21 15:38:55 UTC Source report: https://urlscan.io/result/01a15f1c-a585-70e9-b579-f8a45ed77171/ - URLScan capture 2: https://urlscan.io/screenshots/01a15e92-9b43-759b-94ba-8de80d794683.png Captured: 2026-10-21 15:28:43 UTC Source report: https://urlscan.io/result/01a15f1c-a585-70e9-b579-f8a45ed77171/ - URLScan · 2026-10-18: https://screenshots.phishdestroy.io/us/01a15050-711a-7513-857c-3b7be708de21.png Captured: 2026-10-18 18:40:20 UTC Source report: https://urlscan.io/result/01a15050-711a-7513-857c-3b7be708de21/ SHA-256: de48fc344f97cb0572821e3a2d260108cdcbd0379a6aa07b1c8bab652538f82f - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15e92-b973-71ed-b3b2-5059e688c731.png Captured: 2026-10-21 13:07:25 UTC Source report: https://urlscan.io/result/01a15e92-b973-71ed-b3b2-5059e688c731/ SHA-256: de48fc344f97cb0572821e3a2d260108cdcbd0379a6aa07b1c8bab652538f82f - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15f18-a844-74bb-bf83-2e54cde59496.png Captured: 2026-10-21 15:33:43 UTC Source report: https://urlscan.io/result/01a15f18-a844-74bb-bf83-2e54cde59496/ SHA-256: ff08a788876438f19208e47a3770b673da21ba3ab44bc9ab7890a575f1aa5e47 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "vt": { "v": 1, "fetched_at": "2026-10-21T15:30:08Z", "analysis_at": "2026-10-21T15:08:49Z", "stats": { "timeout": 0, "harmless": 49, "malicious": 4, "suspicious": 0, "undetected": 39 }, "detections": { "G-Data": "phishing", "Sophos": "phishing", "Webroot": "malicious", "SOCRadar": "phishing" }, "reputation": 0, "registrar": "Dominet (HK) Limited", "created": "2026-10-13T09:16:31Z", "expires": "2027-10-13T09:16:31Z", "updated": "2026-10-13T09:16:32Z", "first_seen": "2025-07-26T21:04:44Z", "dns": [ { "ttl": 300, "type": "A", "value": "104.21.42.138" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::ac43:ce1d" }, { "ttl": 300, "type": "A", "value": "172.67.206.29" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3035::6815:2a8a" } ], "dns_at": "2026-10-21T15:09:05Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.team-jr.com", "team-jr.com" ], "issuer": "Let's Encrypt / YE1", "serial": "591691151b61faff741a8611c71f822c079", "sha256": "b7ca999da176b6b755d45e82025309265ef31e2788b3f1fb7a82b890cc719464", "subject": "team-jr.com", "valid_to": "2027-01-11T08:22:24Z", "valid_from": "2026-10-13T08:22:25Z" }, "whois": { "registrar": "Dominet (HK) Limited", "registrar_iana_id": "3775", "registrar_url": "http://www.alibabacloud.com", "created": "2026-10-13T09:16:31Z", "updated": "2026-10-13T09:16:32Z", "expires": "2027-10-13T09:16:31Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "lia.ns.cloudflare.com", "noah.ns.cloudflare.com" ], "dnssec": "unsigned" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T15:35:42Z", "caa_records": { "domain": "s.team-jr.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "dns_server": { "ns": [ { "ip": "108.162.192.185", "host": "lia.ns.cloudflare.com" }, { "ip": "172.64.33.133", "host": "noah.ns.cloudflare.com" } ], "zone": "team-jr.com" }, "location": { "ip": "2a06:98c1:3121::9", "asn": "13335", "org": "CloudFLARENET-EU", "city": "London", "country": "GB" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "team-jr.com" }, "dns": { "A": [ "188.114.97.9", "188.114.96.9" ], "AAAA": [ "2a06:98c1:3120::9", "2a06:98c1:3121::9" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2a06:98c1:3121::9", "family": 6 }, "tech_stack": { "technologies": [ "Cloudflare", "HTTP/3" ] }, "whois": { "registrar": "Dominet (HK) Limited", "created": "2026-10-13T09:16:31Z", "updated": "2026-10-13T09:16:32Z", "expires": "2027-10-13T09:16:31Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "lia.ns.cloudflare.com", "noah.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } } } } ```