stasum[.]io

Analysis of stasum.io shows that the domain was registered on 21 February 2026 through Sav.com, LLC and resolves to the Cloudflare address 172.67.189.11 located in the United States (AS13335). The authoritative nameservers are dom.ns.cloudflare.com and zariyah.ns.cloudflare.com, and the site presents an HTTP 301 redirect before serving content whose title is “Home – Stasum”. The presented SSL certificate is issued by GTS CA 1P5. Threat intelligence flags the site as a high‑risk brand‑impersonation campaign targeting the brand “across” and describing the operation as a crypto scam. The Gridinsoft trust score is 0 / 100, and one of ninety‑three VirusTotal scanners has flagged the domain, indicating at least one detection. The domain appears on a single security blocklist and is already blocked by the PhishDestroy feed. No additional public content has been analyzed beyond the page title, leaving the exact phishing flow and payload unknown. Defenders should immediately add stasum.io and its resolving IP 172.67.189.11 to network deny lists, monitor for future DNS or TLS certificate changes, and consider correlating traffic with the known Cloudflare nameserver set. Continuous observation of related domains registered through the same registrar and of any new listings on blocklists is recommended to mitigate potential expansion of the campaign.