s[.]teams-li[.]com

This domain, s.teams-li.com, is assessed as a Steam brand impersonation phishing site, currently offline as of July 23, 2026. Infrastructure analysis reveals the domain was registered on October 1, 2025, through INWX GmbH and is hosted on Cloudflare nameservers (ariella.ns.cloudflare.com, yahir.ns.cloudflare.com) resolving to IP 188.114.96.3 (US, AS13335). No SSL certificate is present, increasing the risk of unencrypted credential interception. The page title, 'Sign In,' aligns with credential harvesting tactics targeting Steam users, though the exact content and functionality of the site remain unanalyzed due to its offline status.

Detection data indicates the domain appears on one security blocklist (PhishDestroy) and is flagged by 14 of 95 security vendors on VirusTotal, confirming its malicious classification. The Gridinsoft trust score of 0/100 further supports its high-risk designation. While the domain is currently inactive, defenders should treat it as part of a broader Steam-themed phishing campaign.

Recommended actions include blocking the domain at DNS and proxy levels, monitoring for re-emergence on the same or similar infrastructure, and alerting users to potential Steam credential theft attempts. The use of Cloudflare hosting is consistent with phishing operators leveraging CDN services to obscure origin servers and evade takedowns. No evidence of additional scam categories (e.g., crypto, investment) or specific phishing kits is present in the available data.