voting-ip-address-tracking[.]stellar-community-fund-next[.]pages[.]dev

The domain voting-ip-address-tracking.stellar-community-fund-next.pages.dev was observed delivering a crypto‑scam impersonating the Celer brand. Infrastructure analysis shows the site resolved to IP 172.66.47.176, which belongs to AS13335 operated by Cloudflare, Inc. The host location is the United States. HTTPS was served with a Google Trust Services / WE1 certificate, and HTTP responses returned a 403 status, indicating the site is currently taken offline. Cloudflare’s HSTS header was present, confirming TLS enforcement.

Reputation data from Gridinsoft assigned a trust score of 0 / 100, classifying the domain as high‑risk. The domain appears on a single security blocklist and was blocked by PhishDestroy. VirusTotal scans recorded nine detections out of ninety‑five antivirus engines, reinforcing the malicious classification.

The page title "Stellar Community Fund | Blockchain Grants & Web3 Funding" suggests a fabricated grant‑related lure, although the content has not been directly inspected. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑hosting on alternate Cloudflare‑protected IPs, and correlate traffic with known Celer‑related phishing campaigns. Because the site is offline, a direct content review is not possible, and analysts should treat the observed indicators as the most reliable evidence for threat‑intel sharing and for updating detection rules.