superteam[.]me

PhishDestroy identifies superteam.me as a credential theft domain masquerading as a cryptocurrency team platform. This site employs deceptive login prompts to harvest user credentials, targeting individuals involved in crypto or blockchain projects. The domain’s recent registration, combined with its lack of security detections, raises significant concerns about its legitimacy and intent.

Technical analysis reveals several red flags: the domain was created on April 10, 2026—an unusually recent date for a platform claiming to represent a long-standing team. VirusTotal currently reports 1/95 detections, indicating it has evaded antivirus engines, though this may change as intelligence updates. The domain is registered through Gandi SAS and resolves to IP 188.114.97.3, a server associated with multiple suspicious activities. Its SSL certificate, issued by Let’s Encrypt, adds a veneer of legitimacy but does not mitigate the risk of credential harvesting.

Users who visited superteam.me should immediately change passwords for any accounts exposed on the site, enable two-factor authentication where possible, and scan devices for malware. Avoid interacting with the domain further, as inputting credentials or personal data could lead to account compromise or financial loss. Report the domain to your cybersecurity team or platform providers to aid in blocking efforts. Stay vigilant for phishing attempts and verify sources before engaging with crypto-related platforms.