asterdex-web[.]xyz

The domain asterdex-web.xyz was registered on February 21, 2026 through OwnRegistrar, Inc. and is presently taken offline. Infrastructure analysis shows the domain resolves to IP address 192.3.190.187, which is hosted by HostPapa under ASN 36352 and geolocated to the United States. The SSL certificate presented is identified as R13, indicating a standard certificate without extended validation. The site was flagged by PhishDestroy and appears on a single external security blocklist, confirming that at least one reputable anti‑phishing feed has catalogued the domain as malicious.

Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of confidence in the domain’s legitimacy. VirusTotal scans report that eight of ninety‑three antivirus engines flagged the domain, providing independent corroboration of its malicious nature. The page title retrieved from the live endpoint reads “Aster – The next‑gen perp DEX for all traders,” and the campaign is classified as wallet/seed phishing, targeting users’ cryptocurrency wallets and seed phrases. The campaign’s stated brand target is “across,” indicating that the actors are attempting to impersonate the Across brand or service.

No additional content analysis is available beyond the page title; therefore, the precise visual or functional mimicry cannot be confirmed at this time. Defenders should add asterdex-web.xyz to local blocklists, enforce DNS‑based filtering, and monitor for any future resolution to the same IP address or similar certificate signatures. Given the low trust score, presence on a blocklist, and multiple vendor detections, the domain should be treated as high‑confidence malicious infrastructure. Continuous observation of registrations through OwnRegistrar, Inc. and hosting under HostPapa may reveal related campaigns, and threat‑intel teams are advised to correlate any emerging Across‑related phishing attempts with this indicator of compromise.