astroinvezt[.]net

The domain astroinvezt.net was created on 07 April 2025 through the Atak Domain registrar and is presently hosted on a HostPapa infrastructure (AS36352) in the United States, resolving to IP 198.12.66.123. The site employed a Google Trust Services / WE1 SSL certificate, indicating a valid TLS handshake, but the underlying content was identified as a fraudulent offering of forex, cryptocurrency, and binary options trading, as reflected in the page title "AstroInvezt- Forex , Cryptocurrency and Binary options Trading." Reputation services consistently rate the domain extremely low, with Scamadviser and Gridinsoft both assigning a trust score of 1 / 100. The site’s technology stack includes Bootstrap, Smartsupp, OWL Carousel, jQuery, GetButton, FancyBox, and Cloudflare with HTTP/3 support, suggesting a typical commodity web‑hosting setup rather than a bespoke malicious kit.

PhishDestroy has blocked the domain, and it appears on one public security blocklist. VirusTotal analysis recorded a single positive detection out of 95 scanning engines, reinforcing the suspicion of malicious activity. The domain’s current status is offline, indicating that the phishing infrastructure has been taken down or is no longer serving content.

Defenders encountering traffic to astroinvezt.net should enforce blocklist rules, monitor DNS queries for the associated nameservers (ns1.host-forest.com, ns2.host-forest.com), and consider correlating any observed credential‑phishing attempts with the known fraudulent trading narrative. Ongoing vigilance is advised to detect any re‑registration or replica sites that may reuse the same branding or infrastructure components.