c[.]team-st-add[.]com

This domain c.team-st-add.com was observed for the first time on February 21 2026. It resolves to the IP address 172.67.133.127, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The SSL certificate presented is identified as WE1, but no additional certificate details are available. A request to the site returned an HTTP 403 Forbidden response, indicating that the web server is intentionally denying access, and no page content has been captured. VirusTotal analysis shows that 11 of 93 scanned security vendors flagged the domain, confirming a detection profile consistent with generic phishing activity.

Independent reputation services assign extremely low trust scores: Scamadviser reports a score of 1 out of 100, while Gridinsoft rates it 0 out of 100. The domain is currently listed on a single security blocklist and is explicitly blocked by the PhishDestroy feed. The overall risk rating has been elevated, and the domain status is marked as offline at the time of this report. Defenders should treat c.team-st-add.com as malicious.

Immediate mitigation steps include adding the domain and its resolving IP 172.67.133.127 to network deny lists, configuring web proxies or secure DNS resolvers to block resolution, and ensuring endpoint web protection solutions ingest the VirusTotal detection count. Because the domain is hosted on Cloudflare’s shared infrastructure, broader blocking of the entire AS13335 range is not recommended; instead, focus on the specific hostname. Continuous monitoring for re‑registration or new sub‑domains under the same registrar is advisable, as the attacker may attempt to recreate the infrastructure. Updating threat intelligence platforms with the observed indicators—domain name, creation date, IP address, SSL fingerprint, and detection count—will help downstream security controls automatically enforce protection.