aster-restore[.]com

The domain aster-restore.com poses a serious phishing threat designed to trick users into giving away their Microsoft account credentials. The site mimics a legitimate login page, complete with a 'Pieni hetki...' title that suggests a waiting or loading screen, which is a common tactic to keep victims engaged while their information is stolen. This type of attack can lead to unauthorized access to email, files, and other sensitive data tied to a Microsoft account, potentially causing financial loss or identity theft.

PhishDestroy identified this threat through multiple sources of intelligence. VirusTotal flagged the domain with 7 out of 95 security vendors reporting it as malicious, indicating a strong consensus among security tools. The domain was created on November 19, 2025, and registered through MAT BAO CORPORATION, a registrar often associated with suspicious domains. It resolves to the IP address 172.67.201.59, which is currently offline, but the domain may have already been used to harvest credentials. The site lacks an SSL certificate, which is a red flag for any page requesting login information.

If you visited aster-restore.com or entered any personal information, you should immediately change your Microsoft account password and enable two-factor authentication. Monitor your account for any unauthorized activity, such as emails sent from your account or changes to security settings. Run a full antivirus scan on your device, and consider contacting Microsoft support for further assistance. Stay vigilant against similar phishing attempts and always verify the URL before entering credentials.