asterdex[.]gl

This domain, asterdex.gl, is flagged as a high-risk phishing site targeting cryptocurrency exchange users. Analysis indicates it operates under the generic_phishing threat type, designed to harvest login credentials, private keys, or other sensitive financial information through deceptive interfaces mimicking legitimate platforms. The domain's infrastructure and recent creation suggest a deliberate attempt to exploit users seeking digital asset trading services. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 22, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It currently resolves to the IP address 188.114.96.3, which has been observed in prior phishing campaigns. The SSL certificate is issued by Google Trust Services, providing a false sense of security to visitors. Detection metrics from VirusTotal show 1 out of 95 security vendors flagging the domain as malicious, a low detection rate that may indicate evasion techniques or recent deployment. The page title, 'Sorry...,' suggests an incomplete or intentionally vague frontend, potentially masking malicious backend operations. Mitigation steps for this threat type include immediate blocking of the domain and IP at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to asterdex.gl and associated infrastructure. Users who may have interacted with the domain should rotate credentials for any financial or cryptocurrency accounts, enable multi-factor authentication, and monitor for unauthorized transactions. Security teams are advised to conduct retrospective analysis of logs for connections to 188.114.96.3 or related domains registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Given the domain's recent creation and low detection rate, heightened vigilance is recommended for similar newly registered domains in this threat category.