asterdex-app[.]xyz

The domain asterdex-app.xyz was registered on September 25, 2025 through Web Commerce Communications Limited and is presently taken offline. It resolves to the Cloudflare edge address 104.21.37.160, which is associated with AS13335 Cloudflare, Inc. The authoritative name servers are louis.ns.cloudflare.com and veronica.ns.cloudflare.com, indicating the domain is fully hosted on Cloudflare’s network. No SSL certificate is observed for the domain, which is consistent with the lack of HTTPS provisioning at the time of analysis. Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0 out of 100, and Scamadviser rates it 1 out of 100, reflecting a strong likelihood of malicious intent.

The domain is listed on two security blocklists and has been blocked by PhishDestroy and ScamSniffer, demonstrating that multiple anti‑phishing feeds have already flagged it. An AlienVault OTX pulse references the domain, providing an additional external corroboration of its malicious use. VirusTotal analysis shows that ten of ninety‑five scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. The threat classification is a wallet/seed phishing campaign that impersonates the Discord brand, targeting users who may be prompted to surrender cryptocurrency recovery phrases.

Because the site is offline, immediate traffic is not observable, but the infrastructure indicates a typical fast‑flux style deployment behind Cloudflare, allowing rapid re‑hosting if the domain is re‑activated. Defenders should ensure the domain is added to deny‑list rules across DNS filters, proxy gateways, and endpoint firewalls. Monitoring of the associated Cloudflare IP range for any resurgence of malicious content is advised, as is vigilance for newly registered domains that share similar naming patterns or use the same registrar.