voteaster-dex[.]com

This domain, voteaster-dex.com, is actively engaged in brand impersonation to distribute a fraudulent Aster airdrop scheme. The site mimics legitimate cryptocurrency airdrop promotions, luring users into connecting wallets or submitting sensitive credentials under the pretense of claiming rewards. Analysis indicates the threat is designed to deploy crypto drainers, which automatically siphon funds from victims' wallets upon interaction. The page title explicitly reads 'Aster airdrop,' reinforcing the deceptive branding intended to exploit trust in the Aster ecosystem.

Evidence confirms the malicious nature of this infrastructure through multiple technical indicators. The domain is flagged by 16 out of 95 security vendors on VirusTotal, including detections for phishing and malicious activity. It appears on four independent security blocklists and is blocked by wallet security tools such as MetaMask and ScamSniffer. Registered on May 21, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain resolves to the IP address 188.114.97.3. Infrastructure analysis reveals the use of Cloudflare for hosting and protection, alongside HTTP/3 and HSTS, which may obscure further malicious behavior while maintaining a veneer of legitimacy.

Users who have visited voteaster-dex.com or interacted with its content should immediately disconnect any connected wallets and revoke permissions for associated smart contracts. It is critical to audit wallet activity for unauthorized transactions, particularly those involving token approvals or fund transfers. If credentials or private keys were entered, users must migrate assets to a new wallet and monitor for signs of compromise. Additionally, affected individuals should report the domain to relevant security platforms to contribute to broader threat mitigation efforts.