qumuliums[.]sbs

This domain is flagged as a generic phishing threat targeting financial advisory clients under the guise of "Qumulium - Asesoría Financiera Estratégica en Alicante." The risk level is classified as elevated due to its active impersonation of legitimate financial services, designed to harvest sensitive credentials or financial information from unsuspecting victims seeking advisory assistance. Analysis indicates the domain qumuliums.sbs was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to IP address 172.67.164.248 and employs Cloudflare infrastructure with HTTP/3 support. Security vendor detections on VirusTotal stand at 5/95, while the domain appears on one security blocklist. The SSL certificate is issued by Google Trust Services, and the Gridinsoft trust score is 0/100. The site was subsequently taken offline, though its infrastructure remains a documented threat. Mitigation steps for this specific threat type include implementing DNS-level blocking of the domain and its resolving IP address (172.67.164.248) across enterprise networks. Security teams should monitor for related domains registered through NiceNIC or utilizing Cloudflare with similar naming patterns. End-users who may have interacted with the site should be instructed to reset credentials for any financial or advisory services, particularly if reused across platforms. Organizations should review logs for connections to the domain or IP during its active period and correlate with potential credential compromise incidents.