asteroid-rewards[.]xyz

PhishDestroy identifies asteroid-rewards.xyz as an active crypto drainer scam site designed to deceive users into connecting wallets under the guise of distributing ASTER tokens. The domain mimics legitimate ASTER branding (ASTER | Distribution) and employs social engineering tactics to trick victims into authorizing malicious transactions that drain cryptocurrency assets. This threat aligns with the modus operandi of crypto drainers, which exploit users' trust in token distributions or airdrops to steal funds directly from connected wallets.

Technical indicators confirm the malicious nature of this domain. It resolves to IP address 188.114.97.3 and was registered on April 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain is protected by a Let's Encrypt SSL certificate, which adds a false sense of legitimacy, while VirusTotal flags the site with a detection score of 3/95 security vendors. Additionally, this domain appears on 2 security blocklists, including Google Safe Browsing (GSB), and is actively blocked by MetaMask and SEAL security tools, further validating its malicious intent.

As of the latest analysis, asteroid-rewards.xyz remains active and poses a high risk to unsuspecting users seeking ASTER token distributions. Security researchers and users are advised to avoid this domain entirely and report it to relevant authorities or security platforms. While current detection rates are low (3/95), the domain's active status and presence on multiple blocklists underscore the urgency for heightened vigilance. Users should verify token distribution sites through official channels and refrain from interacting with unsolicited links or suspicious domains to mitigate the risk of falling victim to this crypto drainer scam.