aster-ex[.]com

Analysis of aster-ex.com, created on 14 October 2025 and hosted behind Cloudflare (AS13335) in the United States, shows that the domain has been identified as a social media phishing vector. The site resolved to IP 104.21.18.219 and used the Cloudflare nameservers kyrie.ns.cloudflare.com and may.ns.cloudflare.com. No TLS certificate was presented, indicating that the HTTP service was either absent or served without encryption at the time of inspection. The page title returned by the server was "FASTPANEL", which does not correspond to any known legitimate brand and suggests the use of a generic control‑panel interface. Gridinsoft assigned a trust score of 0 out of 100, reflecting extreme malicious confidence.

The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. VirusTotal scans reported that three of ninety‑five antivirus engines flagged the domain, confirming the presence of malicious components. The registrar listed is Tucows Domains Inc., a common registrar for both benign and abusive registrations. The domain is currently taken offline, which limits real‑time observation, but the historical indicators remain sufficient for defensive actions. The lack of an SSL certificate further reduces the credibility of any login interface that might have been presented, as browsers would flag the connection as insecure.

Because the domain is hosted on Cloudflare’s infrastructure, any future relocation of the malicious content could inherit the same IP range, so threat intelligence feeds should correlate activity with the 104.21.18.219 address. The single blocklist listing indicates limited exposure but does not diminish the elevated risk rating assigned by analysts. Defenders should continue to block the domain at network perimeters, ensure that any references to the resolved IP 104.21.18.219 are denied, and monitor for potential re‑use of the associated Cloudflare account.