stokestone[.]io

Analysis of the domain stokestone.io indicates it was associated with a crypto scam operation, as classified by security vendors. The domain, created on February 21, 2026, resolved to the IP address 172.67.130.31, which is part of Cloudflare's network (AS13335) and geolocated in the United States. The page title, 'Stay Ahead in Style with ModernThreads,' does not explicitly reveal the targeted brand or service, but the scam type has been identified as crypto-related by threat intelligence sources. The domain was flagged by at least two security blocklists and blocked by PhishDestroy and ScamSniffer prior to being taken offline.

Infrastructure analysis reveals the use of a Cloudflare SSL certificate (E1), which is consistent with many phishing campaigns leveraging the provider's proxy services to obscure backend hosting. No detections were recorded by the 93 vendors that scanned the domain on VirusTotal at the time of analysis, though the absence of detections does not confirm the domain's safety. The domain's current status is offline, limiting further forensic examination of its content or backend infrastructure. Defenders are advised to treat stokestone.io as a confirmed phishing domain based on its inclusion in security blocklists and vendor classifications.

Network-level blocking of the IP 172.67.130.31 may mitigate residual risk if the domain or associated infrastructure is reactivated. Organizations should monitor for related domains registered under the same registrar or resolving to the same IP range, as threat actors often reuse hosting providers for multiple campaigns. Given the crypto scam classification, users should be alerted to potential financial fraud risks associated with this domain.