On July 24, 2026 analysts observed that the domain stores.astonptech.com.ng was created on February 21, 2026 and is presently taken offline. The site presented the page title “Astonp Tech - Home”. An SSL certificate labeled R11 was associated with the domain, but no further certificate details were disclosed. The Gridinsoft trust score for the domain is 0 out of 100, indicating an extremely low trust rating.
PhishDestroy has already blocked the domain, confirming its involvement in malicious activity. VirusTotal analysis shows that one of ninety‑three security vendors flagged the domain, and the domain appears on a single external security blocklist. No additional data such as IP address, hosting provider, registrar, Safe Browsing status, or Open Threat Exchange entries were available.
Consequently, the observable evidence points to a credential‑harvesting phishing operation, yet the lack of broader infrastructure details limits attribution. Defenders should continue to block the domain at perimeter and endpoint layers, monitor DNS queries for any resurgence, and incorporate the domain into threat‑intel feeds. Ongoing vigilance is advised, especially given the recent creation date and the low trust score, which suggest a short‑lived but potentially impactful phishing campaign.
hostbet HostBet Cloud Technologies Private Limited, IT
Observed location
DE
Server header
LiteSpeed
Location describes the IP network.
TLS証明書
Issuer
R11
Hostname coverage
Hostname coverage not recorded
Collection source
PhishDestroy collector
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Latest HTTP observation不明Origin unreachableHttp 5xx20%2026-10-07 01:25:46 UTC
RDAP registration不明
Observed timelinelast reachable: 2026-04-21 20:03:59 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
8 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups+
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels+
Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
