asterdex-live[.]xyz

Analysis conducted on 25 July 2026 identifies asterdex-live.xyz as a recently registered domain that has been used for a generic phishing campaign. The domain was created on 28 September 2025 and is registered through NiceNIC International Group Co., Limited. DNS resolution points to 172.67.203.110, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. The authoritative nameservers are aisha.ns.cloudflare.com and gannon.ns.cloudflare.com, confirming that the domain is served behind Cloudflare's edge network. No SSL certificate was observed, indicating that HTTPS was not configured at the time of capture. The site returned an HTTP response indicating that it is currently taken offline; the status is recorded as offline in the intelligence feed.

The page title presented by the server is “Nur einen Moment…”, which offers no indication of the targeted brand or service. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low confidence in the site's legitimacy. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, reinforcing its classification as malicious. VirusTotal analysis shows that 8 of 95 scanned security vendors flagged the domain as malicious, providing independent confirmation of its phishing nature. The lack of an SSL certificate, combined with the low trust score and blocklist presence, suggests that the infrastructure was deliberately minimal to avoid detection.

The use of Cloudflare's network may have been intended to obscure the true origin of the malicious content while still providing a public‑facing IP address. Uncertainties remain regarding the specific phishing lure employed, the credential‑stealing mechanisms in use, and any associated command‑and‑control infrastructure, as no additional payload or URL evidence is available. Defenders should continue to block asterdex-live.