asterdex[.]ws

asterdex.ws entered the PhishDestroy evidence set on Feb 4, 2026. Stored content metadata identifies Across as the apparent target. The stored content classification is brand impersonation. The assembled evidence scores 71/100 (high).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 3 detections among 91 engines: alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft on Aug 1, 2026 at 02:25 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. The evidence is not unanimous. URLQuery recorded no positive detection on Feb 4, 2026 at 12:54 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Mar 28, 2026 at 12:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:47 UTC; content was unavailable. Registration records for the domain list Eranet International Limited as the registrar. At collection time, the hostname resolved to 172.67.174.145 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “Aster - The next-gen perp DEX for all traders”. DOM analysis completed on Apr 23, 2026 at 07:21 UTC; stored DOM score 10/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Aug 1, 2026 at 04:03 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

Taken together, the page content and independent findings support classifying this hostname as Across-themed brand impersonation.