drop[.]airdropaster[.]com

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

The domain drop.airdropaster.com was registered on 15 May 2026 through Gname.com Pte. Ltd. and is currently active. It is classified as a high‑risk, brand‑impersonation campaign targeting the cryptocurrency project Aster. The site presents an airdrop promise in its title, “Aster Token Airdrop | Claim Your 10B ASTER”, which aligns with known airdrop‑scam templates. Infrastructure analysis reveals that the domain resolves to the Cloudflare IP address 188.114.96.3, which is located in Canada and belongs to Cloudflare, Inc. The authoritative nameservers are curt.ns.cloudflare.com and margaret.ns.cloudflare.com, confirming that the site is protected by Cloudflare’s edge network. The TLS certificate is issued by Google Trust Services (WE1), indicating that HTTPS is correctly terminated. Threat indicators include a single vendor flag on VirusTotal (1 of 95 scanners), a Gridinsoft trust score of 0 / 100, and detection by the PhishDestroy and ScamSniffer blocklists. The campaign is tagged with the “Airdrop Scam” phishing‑kit identifier, and the domain has been listed on two additional security blocklists. These signals, combined with the explicit brand reference in the page title, demonstrate a coordinated attempt to lure victims into claiming non‑existent Aster tokens. Evidence gaps remain because the page content beyond the title has not been publicly disclosed, preventing confirmation of any credential‑capture forms or malicious payloads. Defenders should therefore treat the domain as hostile. Recommended actions include adding drop.airdropaster.com and its resolving IP (188.114.96.3) to network blocklists, monitoring DNS queries for the associated Cloudflare nameservers, and employing URL filtering to prevent end‑user access. Continuous re‑assessment is advised should additional telemetry, such as sandbox analysis or user reports, become available.