checker-asterdex[.]com

Analysis of checker-asterdex.com shows a domain created on February 21, 2026 and registered through NiceNIC International Group Co., Limited. The domain resolves to the IP address 104.21.28.208, which is owned by AS13335 Cloudflare, Inc. and geolocated in the United States. DNS resolution uses the Cloudflare authoritative nameservers anna.ns.cloudflare.com and roman.ns.cloudflare.com, indicating that the attacker leveraged Cloudflare’s CDN and protection services to hide the true hosting environment. The site presented a TLS certificate issued by Google Trust Services under the WE1 identifier, a certificate commonly associated with legitimate Google services, which may be employed to lend false credibility to the malicious site. The only observed page title, "YouTubeRU — Смотрите YouTube без зависаний," is unrelated to the targeted Google brand and suggests a Russian-language video platform front, reinforcing the profile of a brand‑impersonation campaign that aims to lure victims through social‑media phishing techniques.

At the time of assessment the domain returned HTTP status 403 and was listed as offline, indicating that the phishing infrastructure was taken down or temporarily disabled. VirusTotal scanned the domain and recorded six detections out of ninety‑three security vendors, providing independent confirmation of malicious activity. The domain appears on a single public security blocklist and is specifically blocked by PhishDestroy, further evidencing its classification as a phishing vector.

Uncertainty remains regarding the current operational status of any backend phishing infrastructure, as the offline state prevents direct observation of malicious payloads or credential‑harvesting forms. Defenders should proactively block the domain name and its associated IP address at perimeter firewalls and DNS filtering solutions. Continuous monitoring of the IP 104.21.28.