ultrastellar[.]org

This domain, ultrastellar.org, was set up to trick users into thinking it’s the legitimate UltraStellar platform. In reality, it’s a crypto drainer — a type of phishing site that steals cryptocurrency by prompting visitors to connect their wallets or enter private keys. Once connected, the attackers can drain all funds from the wallet. The site poses as a tokenization platform, but every interaction is designed to compromise your assets.

PhishDestroy identified this threat through multiple indicators. VirusTotal shows 2 out of 95 security vendors flagging the domain, and it appears on three security blocklists. The domain was created very recently — on April 12, 2026 — which is a red flag for a new phishing campaign. It was registered through NameCheap, Inc., a common registrar for malicious domains, and resolves to IP 66.29.146.246. The SSL certificate is issued by Sectigo Limited, but that only means the connection is encrypted, not that the site is safe.

If you visited ultrastellar.org and connected a wallet or entered any credentials, immediately transfer your assets to a new, secure wallet that has never interacted with this site. Change passwords for any accounts where you reused the same credentials. Run a full antivirus scan on your device. To stay safe, always bookmark the official website of any crypto service and double-check URLs before connecting your wallet. Report any losses to your local authorities and the platform being impersonated.