systems-stellarnetworks[.]com

The domain systems-stellarnetworks.com was registered on June 23, 2025 through Global Domain Group LLC and is currently taken offline. DNS resolution points to the IPv4 address 198.251.84.200, which is announced by AS53667 belonging to FranTech Solutions and geolocated to the United States. The site presented a page title identical to the domain name and was classified as a crypto‑related scam that impersonates the Coinbase brand. Infrastructure analysis shows the domain is listed on four independent security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—indicating that multiple threat‑intel providers have observed malicious activity associated with it.

VirusTotal reports a single positive detection out of 93 scanners, reinforcing the suspicion of malicious intent despite the low detection count. The SSL certificate associated with the host is identified as R13, and an independent trust assessment from Gridinsoft assigned a score of 0 out of 100, reflecting an absence of trustworthiness. No additional page content, HTTP response details, or Safe Browsing verdicts are available in the current dataset, leaving the exact phishing payload or credential‑harvesting mechanisms unconfirmed.

Defenders should consider adding the domain and its resolved IP address to deny‑list controls across network perimeter devices, DNS resolvers, and endpoint protection suites. Continuous monitoring of the AS53667 prefix for new registrations or similar hostnames is advised, as adversaries often reuse hosting infrastructure for successive campaigns. Given the confirmed brand impersonation and the presence on multiple blocklists, the domain should be treated as a high‑confidence indicator of compromise for any environment exposed to web traffic targeting cryptocurrency services.