staholding[.]com

staholding.com is currently active and resolves to 94.46.166.92, an address owned by AS24768 ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA in Portugal. The domain, registered on August 3, 2007 through ENOM, INC., uses the nameservers ns1.infmaster.com.br and ns2.infmaster.com.br and presents a valid Let's Encrypt certificate (R12). HTTP requests return status 200 and the only visible page title is “SharePoint – Shared with you”, indicating an attempt to masquerade as a Microsoft SharePoint sharing notification. The site hosts a range of third‑party components including Typekit, Google Tag Manager, Google Analytics, cdnjs, Cookiebot, Cloudflare, and AppNexus, and enforces HSTS. Email infrastructure is minimal, with an MX record pointing to the domain itself. Threat intelligence shows that seven of ninety‑one VirusTotal scanners have flagged the host, the domain appears on one security blocklist and is listed by PhishDestroy. Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. The combination of a legitimate‑looking SharePoint title, high‑risk classification, and observed detections suggests the domain is being used for generic phishing campaigns, likely to harvest credentials or deliver malicious payloads. Defenders should block both the domain and its resolved IP at network perimeters, monitor DNS queries for the associated nameservers, and consider sinkholing the address. Ongoing observation is advised because the site content beyond the title has not been publicly dissected.