xn--astrdex-v8a[.]com

Analysis indicates that the domain xn--astrdex-v8a.com was registered on 2026-02-21 by DEVEXPANSE LTD operating as Regery.com. The domain hosts an SSL certificate identified as R13, which offers minimal validation and is commonly observed in malicious campaigns. The site’s page title, “Aster - The next-gen perp DEX for all traders”, suggests a fabricated cryptocurrency exchange offering, aligning with the documented scam type of wallet/seed phishing. The domain is listed on three independent blocklists—PhishDestroy, ScamSniffer and Enkrypt—and appears on three security blocklists overall.

Gridinsoft assigns a trust score of 0 out of 100, confirming a high confidence of malicious intent. VirusTotal scans report that two of ninety-three security vendors flagged the domain, providing independent corroboration of its suspicious nature. The brand target is recorded as “across”, indicating a broad impersonation strategy rather than a single brand focus. Current operational status is offline; the site has been taken down, but the infrastructure artifacts remain observable.

Defensive recommendations include immediate network-level blocking of the host, integration of the domain into URL filtering and endpoint protection policies, and continuous monitoring of any associated IP addresses or SSL fingerprint reuse. Incident responders should also consider notifying the registrar DEVEXPANSE LTD / Regery.com to accelerate takedown and prevent future re-registration. Continuous threat-intel feeds should be checked for reappearance of the domain or related indicators.