stellular-belekoy-82fff3[.]netlify[.]app

This domain, stellular-belekoy-82fff3.netlify.app, operates as a fraudulent blockchain support portal impersonating the legitimate Across protocol. Analysis of the page content reveals a crypto drainer scheme disguised as a "Blockchain Rectification" service, claiming to resolve wallet or transaction issues. The site employs social engineering tactics, urging users to connect wallets under the pretext of troubleshooting, which likely facilitates unauthorized asset transfers to attacker-controlled addresses. The use of terminology like "multiverse support" and "crypto related issues" aligns with known crypto scam patterns targeting users of cross-chain bridging services, particularly those associated with the Across brand.

Technical indicators confirm the malicious nature of this domain. VirusTotal reports 20 out of 95 security vendors flagging the URL as phishing or fraudulent, with Google Safe Browsing also classifying it as a phishing threat. The domain was registered on February 21, 2026, through Name.com, Inc. (Netlify), and resolves to IP 63.176.8.218, hosted on Amazon.com, Inc. infrastructure (AS16509) in Germany. It appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. The SSL certificate, issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), provides no legitimacy, as fraudulent domains frequently use valid certificates to appear trustworthy.

Users who visited stellular-belekoy-82fff3.netlify.app or interacted with its content should take immediate action. Disconnect any wallets linked to the site and revoke permissions via blockchain explorers or wallet management tools. Scan the device used for access with updated security software to detect potential malware. Monitor connected wallets for unauthorized transactions and report any suspicious activity to the relevant platform or blockchain security team. If credentials or recovery phrases were entered, migrate assets to a new wallet and consider reporting the incident to local cybercrime authorities. Avoid re-engaging with the domain or similar sites, and verify the authenticity of any crypto-related support channels through official project documentation.