compliance-stellar[.]org

The domain compliance-stellar.org poses a specific credential theft threat, designed to harvest sensitive user information under the guise of a legitimate compliance-related service. Analysis indicates this domain was configured to mimic trusted platforms, using a Plesk Obsidian 18.0.74 page title which may suggest a hosting setup typical of phishing infrastructure. The domain's purpose aligns with generic phishing campaigns targeting individuals or organizations expecting compliance communications, potentially leading to data compromise.

Technical evidence shows this domain resolves to IP address 178.16.54.185 and is registered through Gname.com Pte. Ltd. VirusTotal reports 7 out of 95 security vendors flagging this domain as malicious. The domain was created on November 01, 2025, and appears on 1 security blocklist. Additionally, it holds a Gridinsoft trust score of 0/100 and is blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, which provides encryption but does not validate domain legitimacy. The domain is currently offline, indicating it has been taken down following detection.

Users who visited compliance-stellar.org should change any credentials entered on the site immediately and monitor for unauthorized account activity. It is recommended to enable multi-factor authentication on all accounts and run a full security scan on devices used to access the domain. Avoid visiting the domain again, even if it appears online, as it may be reactivated under different hosting. Report any suspicious communications referencing this domain to relevant security teams.