s[.]team-lo[.]com

PhishDestroy identifies s.team-lo.com as a high-risk generic phishing domain specifically designed for credential theft, impersonating the Steam login page to harvest user accounts. The domain was registered on February 21, 2026, through Web Commerce Communications Limited, and resolves to IP address 194.87.216.152. It uses a Let's Encrypt SSL certificate (E7) to appear legitimate, but has been flagged by 17 out of 95 security vendors on VirusTotal and appears on two security blocklists, with Google Safe Browsing specifically marking it for phishing.

Despite being taken offline, the domain remains a threat as similar domains may appear. Users who entered credentials on this site should immediately change their Steam password and enable two-factor authentication. Monitor accounts for unauthorized access and report any suspicious activity to Steam Support. Avoid clicking links from unsolicited messages, and always verify the URL before logging in—official Steam domains use 'steampowered.com' or 'steamcommunity.com'.