claim-stars[.]obelisk[.]build

The domain claim-stars.obelisk.build was a crypto drainer phishing site designed to steal cryptocurrency from victims by tricking them into connecting their wallets. It posed as a $STARS airdrop reward page but operated as a scam to drain funds once wallet access was granted. No legitimate brand or known drainer kit was associated with this campaign. The site is currently taken offline, but prior activity classified it as an elevated-risk threat.

Claim-stars.obelisk.build was detected by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). It was registered through Go Daddy, LLC on June 09, 2023, and resolved to the IP address 76.76.21.98, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate was issued by Let's Encrypt (R12), and the page title displayed '🌟 $STARS Airdrop | Claim Your Rewards'. Technologies detected on the site included Vercel and HSTS, with a Gridinsoft trust score of 0/100. Google Safe Browsing did not flag the domain at the time of analysis.

Victims of claim-stars.obelisk.build should immediately revoke any token approvals granted to the site using a tool like Etherscan's token approval checker or Revoke.cash. Funds should be moved to a new wallet to prevent further unauthorized transactions. If personal information or credentials were entered, passwords should be changed, and two-factor authentication enabled on all accounts. The domain can be reported to the registrar (Go Daddy) for abuse, and additional reports may be filed with platforms like PhishTank or the Anti-Phishing Working Group to aid in takedown efforts.