MALICIOUS — HIGH
aster-us[.]site
1 of 95 security engines flagged the domain; the latest stored check returned HTTP 502.
- VirusTotal
- 1/95
- Blocklists
- No stored match
- Disponibilidad
- Contenido no disponible · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
aster-us.site — Contenido no disponible (HTTP 502). Suplantación de marca: Binance; Tipo de estafa: Brand Impersonation. Resumen de las pruebas: VirusTotal 1/95 (Gridinsoft); PhishDestroy score 55/100. Registrador: Hostinger.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Digest
aster-us.site is classified high with an evidence score of 55/100. 1 of 95 security engines flagged the domain. Registered 25 Sep 2025 via HOSTINGER operations, UAB, hosted on 82.29.157.167 (AS-HOSTINGER Hostinger International Limited, CY, US). The latest stored check on 9 Aug 2026 returned HTTP 502 and includes a capture.
Stored generated summary (templated)cerebras · 25/07/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
Analysis of aster-us.site shows a confirmed brand‑impersonation campaign targeting Binance. The domain was registered on 2025‑09‑25 through HOSTINGER operations, UAB and is hosted on an IP address (82.29.157.167) owned by AS47583 Hostinger International Limited, located in the United States. DNS resolution uses ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or low‑cost hosting services. No SSL certificate is presented, indicating traffic is unencrypted.
The page title retrieved from the live site reads “Aster (ASTER) Hits New All‑Time High – Surpasses Competitor in Volume and Revenue,” which does not reference Binance but the domain is explicitly flagged as impersonating the Binance brand. Security telemetry shows the domain appears on a single blocklist and is blocked by PhishDestroy. VirusTotal scanning recorded a single positive detection out of 95 vendors, confirming at least one security product identified malicious behavior. Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious classification.
The domain’s current status is offline, suggesting the operator may have taken the site down after detection. Defenders should continue to block the domain and its hosting IP, add the domain to internal deny lists, and monitor for any resurgence of the same IP or similar hosting patterns. Given the lack of SSL and the low trust score, any attempted connections to this host should be terminated. Further investigation is warranted to determine whether additional Binance‑related phishing pages were hosted under the same IP or nameserver infrastructure, but no additional evidence is presently available.
Cobertura de los datos12 recorded checks
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Datos y informes externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.