astar-netwrk[.]pages[.]dev

Analysis of astar-netwrk.pages.dev indicates active high‑risk brand‑impersonation infrastructure. The domain was registered on 21 February 2026 through Cloudflare, Inc., and is hosted on Cloudflare’s network (AS13335) resolving to IP 172.66.44.86 located in the United States. DNS resolution uses the authoritative nameservers aron.ns.cloudflare.com and norman.ns.cloudflare.com. The site serves HTTPS with a certificate issued by Google Trust Services (WE1) and enforces HSTS while supporting HTTP/3, confirming modern web stack usage. The page title “Áster Network Lógin — Decentralized Gateway” suggests an attempt to lure credentials, and the brand target is listed as “across,” indicating a broad impersonation scope. Reputation signals include a Gridinsoft trust score of 0/100, inclusion on a single security blocklist, and detection by three independent blocklists (MetaMask, PhishDestroy, SEAL). VirusTotal reports two of ninety‑three scanners flagging the domain, reinforcing the malicious classification. No additional intelligence on payload or credential harvesting mechanisms is currently available. Defenders should block the domain at DNS and network layers, monitor for connections to the associated Cloudflare IP, and enforce strict validation of TLS certificates to prevent credential submission. Continuous re‑evaluation is advised as further indicators may emerge.