app[.]astramarkets[.]top

The domain app.astramarkets.top was registered on 21 February 2026 and is currently listed as offline. DNS resolution points to the IPv4 address 163.61.188.2, which belongs to ASN 153568 (NEW DHAKA HARDWARE) and is geolocated in the United States. The site presented the page title “Home | The easiest place to invest bitcoin”, indicating a brand‑impersonation attempt toward the Bitcoin ecosystem. An SSL certificate identified as “R11” was observed, but no further certificate details are available.

VirusTotal analysis shows that eight of ninety‑five scanning engines flagged the domain, confirming malicious intent. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. The risk rating assigned is elevated, reflecting the combination of brand impersonation, vendor detections, and hosting characteristics. Because the site is no longer reachable, dynamic content could not be captured, leaving the exact phishing kit or payload unknown.

Defenders should continue to block the domain and its underlying IP address at network perimeter, update DNS filtering policies, and monitor for any re‑appearance of the host or similar certificate patterns. Additional reconnaissance on the ASN and related hostnames is recommended to uncover possible supporting infrastructure. The evidence presently points to a coordinated impersonation campaign targeting Bitcoin investors, and proactive blocking remains the primary mitigation.