system-stellarnetworks[.]com

The domain system-stellarnetworks.com was registered on February 21, 2026 through Global Domain Group LLC and resolves to the IP address 198.251.89.220, which is hosted by AS53667 FranTech Solutions in the United States. The site presents a page title identical to the domain, "systems-stellarnetworks.com," and serves an HTTP 307 redirect, indicating a temporary move that could be used to forward victims to a credential‑harvesting endpoint. The TLS certificate is issued by Let’s Encrypt (R13), providing encryption but offering no assurance of legitimacy. MX records point to system‑stellarnetworks.com at priority 0, a configuration often used to receive spoofed email for credential harvesting. Nameservers ns27.asurahosting.com and ns28.asurahosting.com are associated with the hosting provider and have been observed on multiple abuse listings.

Infrastructure analysis reveals a Gridinsoft trust score of 0 out of 100, confirming the domain’s reputation as malicious. The domain appears on six security blocklists and has been flagged by PhishDestroy, MetaMask, SEAL, Polkadot, and Enkrypt. VirusTotal reports that 7 of 95 security vendors flagged the domain, reinforcing the high‑risk assessment. Although the exact content of the landing page has not been examined, the presence of a credential‑phishing classification, combined with the observed technical indicators, strongly suggests the site is designed to capture user credentials.

Given the confirmed high‑risk credential‑phishing designation, defenders should add system‑stellarnetworks.com to URL filtering and email security policies, block its IP address and associated ASN, and monitor DNS queries for similar domains. Continuous surveillance of the hosting provider and nameservers is advised, as they may be leveraged for additional malicious domains. Immediate remediation actions include isolating any internal traffic to the IP and updating intrusion detection signatures to flag the observed HTTP 307 response pattern.