asterdex-trading[.]onrender[.]com

This domain, asterdex-trading.onrender.com, is identified as a fraudulent cryptocurrency exchange designed to deceive users into disclosing sensitive account credentials or transferring digital assets. The site mimics legitimate decentralized exchange (DEX) interfaces, presenting itself under the name 'AsterDEX Trading.' Victims are typically lured through social engineering tactics, such as fake promotions, referral schemes, or impersonation of known trading platforms. Once credentials or funds are entered, they are harvested by threat actors for unauthorized access or direct theft. Analysis indicates the domain is hosted on Render Services Inc. infrastructure and currently resolves to the IP address 216.24.57.251. It is flagged by 2 out of 95 security vendors on VirusTotal, a relatively low detection rate that suggests either recent deployment or evasion techniques. The domain appears on one security blocklist and is blocked by PhishDestroy. Technical indicators include the use of Cloudflare for content delivery and HTTP/3 protocol support, which may be leveraged to obscure malicious traffic or improve site performance. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy to unsuspecting users. If a user has visited asterdex-trading.onrender.com or entered any information on the site, immediate action is required. First, cease all interaction with the domain and do not respond to any follow-up communications. Users should revoke access to any connected cryptocurrency wallets or exchange accounts and monitor for unauthorized transactions. Change passwords for all financial and email accounts associated with the credentials entered, ensuring the use of strong, unique passwords and enabling multi-factor authentication where available. Report the incident to relevant financial platforms and consider submitting the domain to additional threat intelligence feeds to aid in broader detection efforts. Users are advised to verify the authenticity of any trading platform by cross-referencing official sources and avoiding links from unsolicited messages.