app[.]asterdex-dev[.]xyz

app.asterdex-dev.xyz is a subdomain of asterdex-dev.xyz. PhishDestroy first observed the hostname on Feb 26, 2026. Stored content metadata identifies Across as the apparent target. The captured page title is “Aster - The next-gen perp DEX for all traders”. Page analysis recorded additional brand references to Discord, Solana, and Telegram. Stored page analysis classifies the content as wallet/seed phishing. Current evidence score: 86/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and ScamSniffer. VirusTotal recorded 12 detections among 93 engines: alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Kaspersky, Lionic, Sophos, Trustwave, Webroot on Feb 25, 2026 at 00:48 UTC. ScamSniffer listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 22:20 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:17 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:09 UTC; content was unavailable. The recorded creation date for the registrable domain asterdex-dev.xyz is Feb 21, 2026. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 192.3.190.189 on AS36352 (AS-COLOCROSSING, US). The recorded endpoint location is Buffalo, US. The stored server header is LiteSpeed. DOM analysis on Mar 23, 2026 at 23:13 UTC returned 15/100. The evidence archive retains 1 visual capture from PhishDestroy. IoC extraction on Aug 1, 2026 at 04:28 UTC retained 0 format-validated wallet addresses and 1 Telegram indicator. TLS metadata lists R12 as the certificate issuer.

The content indicators and 2 positive source findings support the current Across-themed wallet/seed phishing classification.