astersdex[.]info

On July 23, 2026, the domain astersdex.info was observed serving a page whose HTML title reads “Just a moment…”. The site was hosted behind Cloudflare’s network (AS13335) and resolved to the IP address 104.21.60.37, which is located in the United States. Registration was performed through Cloudflare, Inc., and the authoritative nameservers are donna.ns.cloudflare.com and howard.ns.cloudflare.com. No TLS certificate was presented, indicating that HTTPS was not configured for the host. Reputation checks show a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist.

It has also been listed by the PhishDestroy blocklist. VirusTotal analysis recorded seven detections out of ninety‑five scanned vendors, confirming that multiple security engines consider the domain malicious. The current operational status is offline, and the site has been taken down. The available evidence confirms that astersdex.info was being used for a generic phishing campaign, although the specific target or lure has not been disclosed.

The lack of an SSL certificate, combined with the low trust score and multiple vendor detections, suggests a low‑quality malicious infrastructure. Uncertainty remains regarding the precise phishing kit, the timeline of initial registration, and whether any credential harvesting succeeded before takedown. Defenders should continue to block the domain at perimeter filters, update any URL‑allow lists, and monitor for future re‑registration of the same host name or adjacent subdomains on the same IP range. Threat‑intel feeds should retain the indicator for at least 30 days, and incident response teams should verify that no internal logs contain requests to 104.21.60.37 during the observed window.