interstellarcapital[.]co

The domain interstellarcapital.co is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency platform Across. This scam operates as a cryptocurrency phishing scheme, designed to deceive victims into disclosing sensitive information or transferring funds under false pretenses. As of the latest verification, interstellarcapital.co has been taken offline, though prior activity indicates it posed an elevated risk to users.

Technical analysis reveals that interstellarcapital.co was flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, which assigned it a trust score of 0/100. The domain was created on February 21, 2026, and resolved to the IP address 13.228.83.105, hosted on Amazon.com, Inc. infrastructure in Singapore (AS16509). It appeared on one security blocklist, PhishDestroy, while Google Safe Browsing did not flag it. The SSL certificate was issued by E5, and the observed page title was 'Interstellar Capital'. Scamadviser assigned the domain a trust score of 20/100, further indicating its malicious nature.

Users who interacted with interstellarcapital.co should immediately revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. If login credentials were entered, change passwords for the affected accounts and enable two-factor authentication where available. Monitor accounts for unauthorized transactions and report the incident to the impersonated brand, Across, as well as to relevant authorities or platforms such as the Anti-Phishing Working Group (APWG) or local cybercrime units.