asterproject[.]xyz

The domain asterproject.xyz was registered on April 10, 2026 through NameSilo, LLC and is currently active. DNS resolution points to IP address 188.114.97.3, which belongs to CloudFlare, Inc. in Canada and is served by the CloudFlare authoritative nameservers hank.ns.cloudflare.com and virginia.ns.cloudflare.com. The site presents a TLS certificate issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS endpoint despite the underlying content not being publicly visible. An HTTP request returns a 403 status code and the page title is limited to the generic string "Just a moment...," suggesting a potential challenge or interstitial page rather than a fully rendered phishing landing page. Threat intelligence signals include a single detection by one of ninety‑four antivirus engines on VirusTotal, a Gridinsoft trust score of 0 out of 100, presence on one security blocklist, and inclusion in one AlienVault OTX pulse. The domain is also listed by PhishDestroy as blocked. The high risk rating reflects the combination of recent creation, cloud‑based hosting, minimal visible content, and the limited but present security vendor detections. Defenders should consider immediate blocking of the domain and its associated IP address in perimeter and endpoint filters, monitor DNS queries for the CloudFlare nameservers, and employ URL reputation services to capture any future redirects or content changes. Continuous re‑evaluation is advised, as the current evidence does not reveal the specific phishing payload or target audience, leaving the full scope of the campaign uncertain.