asterswap[.]cc

Analysis of the domain asterswap.cc indicates a high-risk cryptocurrency scam impersonating Ethereum infrastructure. Registered on February 21, 2026, through NameCheap, Inc., the domain resolves to IP address 216.150.16.129, hosted on Amazon.com, Inc. (AS16509) in the United States. The site presents itself as 'AsterSwap - Instant Crypto to ASTER Exchange | Bitcoin, Ethereum, USDC to Aster,' explicitly targeting users of Ethereum and related cryptocurrencies. Infrastructure analysis reveals the use of Vercel hosting and HSTS implementation, alongside nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. Security vendor detections are limited but notable: four of ninety-three engines on VirusTotal flag the domain as malicious, and it appears on one security blocklist, including PhishDestroy. The domain currently returns an HTTP 308 status, which may indicate redirection or an attempt to evade detection. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as untrustworthy. While the exact mechanics of the scam remain unconfirmed due to the absence of deeper behavioral analysis, the combination of brand impersonation, cryptocurrency focus, and low detection coverage suggests a targeted threat. Defenders should treat this domain as active and malicious, particularly in environments handling Ethereum or related assets. Blocking the domain and its resolving IP at the network level is recommended. Further monitoring of associated infrastructure, such as the registrar and hosting provider, may reveal additional linked domains or campaigns. The domain's recent registration and limited detection history underscore the need for proactive threat intelligence rather than reliance on established blocklists.