lobstr-wallet-uss[.]webflow[.]io

PhishDestroy has identified lobstr-wallet-uss.webflow.io as a crypto drainer, a specific type of phishing site designed to steal cryptocurrency wallet credentials and drain funds. The domain is currently offline, but during its active period it impersonated the legitimate Lobstr wallet service, targeting Stellar Lumens users with a fake login page. The site was registered through Webflow, a legitimate website builder, which allowed the scammers to create a convincing replica of the official Lobstr platform.

Technical analysis reveals several red flags. The domain was flagged by 5 out of 95 security vendors on VirusTotal, and appears on 3 security blocklists. It was created on May 06, 2026, and resolves to IP address 172.64.151.8. The SSL certificate was issued by Google Trust Services, adding a false sense of legitimacy. The registrar is Webflow, and the domain's creation date is unusually recent, a common tactic used by threat actors to avoid detection. The page title, "Exploring Lobstr® Wallet: Your Gateway to Stellar Lumens," closely mimics the official branding, further deceiving visitors.

Although the domain is now offline, users who may have interacted with this site should immediately change their Stellar Lumens wallet passwords and enable two-factor authentication. It is crucial to only access cryptocurrency wallets through official channels and to verify URLs carefully before entering any sensitive information. PhishDestroy recommends monitoring for any unauthorized transactions and reporting any suspicious activity to relevant blockchain security teams. Stay vigilant against similar phishing campaigns and always double-check domain names for subtle misspellings or unusual subdomains like "uss" in this case.