stellar-talk[.]vercel[.]app

This domain, stellar-talk.vercel.app, is flagged as an active crypto wallet drainer phishing page targeting users of decentralized finance platforms. Analysis indicates the site employs deceptive interfaces to trick victims into connecting their wallets, enabling unauthorized transactions and asset theft. The threat is classified as high-risk due to its direct financial impact and ongoing operational status. Infrastructure analysis reveals the domain was registered on March 04, 2026, through Vercel Inc., a platform commonly abused for rapid deployment of malicious pages. It resolves to the IP address 216.198.79.3, hosted on Amazon Web Services (AS16509) in the United States. The SSL certificate, issued by Google Trust Services (WR1), provides a false sense of legitimacy. Detection metrics show 12 out of 95 security vendors on VirusTotal have flagged the domain, while it appears on three distinct security blocklists, including PhishDestroy, MetaMask, and SEAL. The page title, StellarTalk, suggests an attempt to impersonate communication or wallet services related to the Stellar blockchain. Mitigation requires immediate action from both end users and network administrators. Users should avoid interacting with the domain or any unsolicited links directing to it, particularly those received via email or social media. Wallet connections should only be made through verified, official platforms, and transactions should be double-checked for unexpected requests. Network-level protections should include blocking the domain and its resolving IP (216.198.79.3) at firewalls and DNS filters. Organizations should monitor for internal traffic to the domain and conduct retrospective analysis to identify potential prior exposure. Given the domain's active status, continuous vigilance and proactive blocking are recommended.