check-superteam[.]com

PhishDestroy identifies check-superteam.com as an active crypto drainer domain masquerading as Superteam Earn, a legitimate Web3 job platform. This domain employs brand impersonation by replicating the title and visual elements of the official Superteam Earn site to deceive users into connecting crypto wallets and signing malicious transactions that drain funds. The threat actor leverages a generic drainer kit commonly used in Web3 credential theft campaigns, targeting users seeking Web3 bounties and job opportunities. The domain’s design closely mirrors the legitimate Superteam platform to maximize victim engagement and illicit fund extraction.

This domain was flagged with the following technical indicators: VirusTotal detection score is 2/95, indicating no current antivirus or security vendor coverage. The domain was registered on April 05, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 188.114.97.3. Google Safe Browsing (GSB) has not yet flagged the domain, and no third-party blocklists currently list it. The domain’s recent creation date and low detection rate suggest an emerging threat with limited visibility in security ecosystems.

As of the latest analysis, check-superteam.com remains active and operational. Immediate response actions include updating threat intelligence feeds, adding the domain and IP to blocklists, and notifying hosting providers and registrars for potential takedown. While the risk level is currently under investigation, the domain’s active status and use of a legitimate-looking drainer interface pose a high risk to users seeking Web3 employment. Users are strongly advised to avoid this domain, verify job URLs via official Superteam channels, and use hardware wallets or transaction simulation tools when interacting with Web3 platforms.