s[.]team-fz[.]com

The domain s.team-fz.com was registered on July 30, 2026 through Dominet (HK) Limited and currently resolves to the IP address 188.114.96.3. DNS resolution is served by Cloudflare nameservers paris.ns.cloudflare.com and steven.ns.cloudflare.com, indicating the use of a reputable CDN provider for hosting. Within two days of creation the domain appeared on two publicly available security blocklists and has been actively listed by PhishDestroy and OpenPhish as a phishing‑related site.

VirusTotal analysis shows that 13 out of 91 scanned security vendors have flagged the domain as malicious, reinforcing the suspicion that the infrastructure is being leveraged for credential‑stealing or other fraudulent activity. No additional intelligence such as SSL certificate details, HTTP response codes, or page title information is currently available, so the precise content hosted on the site cannot be described at this time. The rapid emergence of the domain, coupled with its immediate inclusion on multiple blocklists and detection by a majority of VirusTotal scanners, suggests a deliberate, high‑risk phishing campaign targeting users who might receive links that appear to originate from legitimate services.

Defenders should prioritize adding s.team-fz.com to network‑level deny lists, configure web filtering solutions to block access, and monitor DNS queries for the associated IP address 188.114.96.3. Continuous re‑assessment is recommended, as the threat actor may shift hosting or modify the domain’s content, but given the current evidence the domain should be treated as an active, high‑severity phishing source.