asterscz-rewarded[.]xyz

PhishDestroy has identified asterscz-rewarded.xyz as an active phishing domain targeting users of the Metamask cryptocurrency wallet. This site poses as a legitimate distribution platform for a token called ASTER, but its real purpose is to steal wallet credentials, private keys, or other sensitive information. The domain uses the Metamask brand to trick visitors into believing they are interacting with an official service, when in fact it is a sophisticated brand impersonation attack designed to drain cryptocurrency holdings.

Our investigation reveals strong technical indicators of malicious intent. The domain was created on February 21, 2026, and is registered through NiceNIC International Group Co., Limited, a registrar often associated with fraudulent domains. VirusTotal data shows that 5 out of 95 security vendors flag this domain as malicious, and it appears on 4 security blocklists. The site resolves to IP address 172.67.148.22 and uses an SSL certificate issued by Google Trust Services (WE1), which gives it a false sense of legitimacy. The page title "ASTER | Distribution" further reinforces the impersonation of a token distribution event.

If you have visited asterscz-rewarded.xyz, you should immediately take action. Do not enter any personal information, especially your Metamask seed phrase or private keys. Scan your device for malware using a trusted antivirus solution. If you entered any credentials, assume they are compromised and transfer your cryptocurrency assets to a new, secure wallet immediately. Enable two-factor authentication on all related accounts and monitor for unauthorized transactions. Report the phishing domain to Metamask’s official support channels. Stay vigilant and always verify domain authenticity before interacting with cryptocurrency platforms.