cryptoexchange[.]stellans[.]com

The domain cryptoexchange.stellans.com is currently active and resolves to the IPv4 address 162.0.209.151, hosted in the United States under AS22612 (Namecheap, Inc.). The domain was registered on December 17, 2011 through PDR Ltd. d/b/a PublicDomainRegistry.com and uses the nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. An HTTPS service is presented with a Sectigo RSA Domain Validation certificate issued by Sectigo Limited, indicating a valid TLS handshake. Web server headers reveal LiteSpeed and a front‑end stack built on Bootstrap, jQuery, OWL Carousel, and the OWL Carousel library. The site returns HTTP 200 for the root path, but a Gridinsoft trust score of 0/100 classifies it as highly untrusted. The domain is listed on a single security blocklist and has been flagged by PhishDestroy as a brand‑impersonation of Crypto.com, matching the reported scam type of cryptocurrency fraud. VirusTotal analysis shows that one out of ninety‑five scanning engines flagged the domain, suggesting at least minimal malicious indication. No additional public intelligence on phishing page content or credential‑harvesting mechanisms has been released, leaving the exact payload and victim interaction unknown. Defenders should block DNS resolution and HTTP/S traffic to 162.0.209.151, add the domain to URL filtering policies, and monitor for any outbound connections from internal hosts that may attempt to contact the site. Ongoing surveillance of the IP reputation and any new detections on blocklists is recommended, as the infrastructure remains under active use.