asterdex-ast[.]info

The domain asterdex-ast.info is a phishing site engaged in brand impersonation targeting users of the BNB Chain cryptocurrency platform. It posed as a legitimate Aster airdrop to deceive victims into connecting wallets, a tactic known as wallet_connect_phish, though no drainer kit was identified. The site is currently taken offline, but its prior activity classified it as an elevated-risk threat.

Technical indicators confirm the malicious nature of asterdex-ast.info. The domain was flagged by 12 of 95 VirusTotal security vendors, including ADMINUSLabs, alphaMountain.ai, and BitDefender. It appeared on 2 security blocklists, PhishDestroy and ScamSniffer, and was registered through Cloudflare, Inc. The domain resolved to IP address 172.67.170.106, hosted by Cloudflare in the US (AS13335), with nameservers nora.ns.cloudflare.com and sid.ns.cloudflare.com. No SSL certificate was present, and the observed page title was 'Aster airdrop'. Gridinsoft and Scamadviser assigned trust scores of 0/100 and 1/100, respectively, while AlienVault OTX recorded it in one threat intelligence pulse.

Victims of asterdex-ast.info should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or BscScan. Funds should be transferred to a new, secure wallet to prevent unauthorized access. If credentials were entered, change passwords for associated accounts and enable two-factor authentication. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in takedown efforts.