stobox-migration[.]live

The domain stobox-migration.live was registered on July 20, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is served by the Cloudflare nameservers anuj.ns.cloudflare.com and rosalyn.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.96.3, a host that presently appears on a single public security blocklist and is actively blocked by the PhishDestroy service. VirusTotal records indicate that the domain has been submitted to 91 scanning engines, yet none of those vendors have raised a detection at the time of analysis; this absence of alerts does not constitute confirmation of safety, merely a lack of reported malicious payloads in the submitted samples.

The site is classified in the intelligence feed as a generic phishing threat, but no additional artifacts such as page titles, SSL certificate details, HTTP response codes, or brand targeting have been disclosed, leaving the exact content of the landing page unknown. Given the recent creation date, the association with a known phishing blocklist, and the use of Cloudflare infrastructure—commonly leveraged for fast‑flux and anonymity—defenders should treat the domain as actively malicious.

Recommended mitigation steps include adding the domain and its resolving IP address to local and network‑wide blocklists, monitoring for any future detections on additional scanning services, and updating intrusion‑prevention signatures to flag traffic to 188.114.96.3. Continuous observation of the domain’s registration status and any changes to its DNS configuration is advised, as threat actors frequently alter hosting or nameserver details to evade detection.