astr-reward-check[.]pages[.]dev

Analysis indicates that the domain astr-reward-check.pages.dev was registered on 17 April 2026 and is hosted behind Cloudflare’s network (IP 188.114.96.3, CA). The domain resolves to Cloudflare nameservers burt.ns.cloudflare.com and pearl.ns.cloudflare.com and presents a TLS certificate issued by Google Trust Services under the WE1 root, with HSTS and HTTP/3 enabled. Front‑end assets include jQuery, confirming modern web technology use. The only visible page title returned by the server is “Aster Rewards – Unlock Your Benefits”, which aligns with the generic phishing classification. The site is currently reachable (HTTP 200) and is listed on a single security blocklist; PhishDestroy has flagged it, and Gridinsoft assigns a trust score of 0 / 100. No antivirus vendor on VirusTotal has reported a detection, but the absence of detections does not constitute assurance of safety. Concrete malicious behavior beyond the phishing label has not been observed, and the content of the landing page has not been publicly dissected. Defenders should treat the domain as hostile: block DNS resolution, add the IP and host to perimeter deny lists, and monitor for any new sub‑domains or similar page‑title patterns. Continuous re‑evaluation is advised as additional telemetry becomes available.