aster[.]trade

This domain, aster.trade, is currently flagged as an active credential harvesting phishing site designed to deceive users into submitting sensitive authentication details. Analysis indicates the infrastructure is operational, with no evidence of brand impersonation at this stage, though the phishing kit appears generic and adaptable to multiple targets. The domain remains accessible despite security interventions. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC, an uncommon future-dated registration that may indicate an attempt to evade detection or establish long-term persistence. It resolves to IP address 172.67.198.181, hosted on AS13335 (Cloudflare, Inc.), a network frequently leveraged to mask origin servers and complicate takedown efforts. The SSL certificate, issued by Google Trust Services (WE1), provides HTTPS encryption, lending a false sense of legitimacy to potential victims. Security telemetry shows the domain is flagged by 10 of 95 vendors on VirusTotal and appears on four independent blocklists, including entries from PhishDestroy, Polkadot, Enkrypt, and Codeesura. The page title, 'Suspected phishing site | Cloudflare,' suggests automated detection by the hosting provider, though the domain remains active and unmitigated. Current risk assessment categorizes aster.trade as high severity due to its operational status, Cloudflare-protected infrastructure, and future-dated registration. Organizations are advised to implement immediate DNS-level blocking for 172.67.198.181 and aster.trade across all network security controls. Endpoint protection systems should be updated to include the domain and associated SSL certificate (Google Trust Services / WE1) in deny lists. Security teams should monitor for internal traffic to the domain, particularly from users who may have interacted with phishing emails or malicious advertisements. Given the future-dated registration, ongoing monitoring is recommended to detect potential rebranding or domain migration attempts.