s[.]team-cxv[.]pro

Analysis of the domain s.team-cxv.pro indicates that it was registered on February 21, 2026 and subsequently taken offline prior to the report date of July 24, 2026. The domain resolves to the IPv4 address 38.89.142.175, which is allocated to Cogent Communications, LLC (AS174) and geolocated to Singapore. Threat intelligence feeds have flagged the domain as malicious: seven of ninety‑three security vendors on VirusTotal reported a detection, and the site is listed on a single security blocklist. Additional reputation services assign extremely low trust scores, with Gridinsoft reporting 0 out of 100 and Scamadviser rating the domain at 1 out of 100.

The SSL certificate associated with the domain carries an R10 rating, suggesting a weak or untrusted certificate. PhishDestroy has actively blocked the domain, confirming its use in phishing campaigns. No public page title, brand target, or kit information is available, and the exact content of the hosted site has not been captured.

The combination of low trust scores, multiple vendor detections, and blocklist presence classifies the infrastructure as elevated‑risk generic phishing. Defenders should continue to block the domain at network perimeter devices, update URL filtering and DNS sinkhole lists, and monitor the associated IP address for any re‑activation. Incident responders should also consider the IP’s ASN (AS174) when assessing broader campaign activity, as Cogent‑hosted infrastructure is frequently leveraged for short‑lived phishing sites.