dedust[.]asia

dedust.asia was registered on 10 December 2024 through Web Commerce Communications Limited. The sole nameserver configuration resolves the domain to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate is present, indicating the site was served over plain HTTP before being taken offline. The page title returned by the server is the literal string “dedust.asia”, providing no additional context about the intended victim or brand.

Reputation services rate the domain extremely poorly: Scamadviser assigns a trust score of 1 out of 100, Gridinsoft reports 0 out of 100, and the domain appears on a single security blocklist. VirusTotal analysis shows that five of ninety‑five scanning engines flagged the domain as malicious, supporting the suspicion of abusive use. PhishDestroy has also listed the domain as blocked, confirming its classification as a phishing resource. The current offline status suggests the operator has removed the site, but the underlying infrastructure—Cloudflare hosting and a low‑cost registrar—remains available for rapid redeployment.

Defenders should continue to monitor the IP address 188.114.97.3 for reactivation, enforce blocklisting of the domain in web filters, and consider adding the associated IP range to deny lists. Additional investigation is needed to determine the exact phishing payload, target brand, or credential‑harvesting technique, as the page content has not been captured. Until such details emerge, precautionary controls based on the observed indicators are advised.