interface-astar[.]xyz

Analysis of the domain interface-astar.xyz indicates active malicious infrastructure supporting a generic phishing campaign. The domain was registered on March 13, 2026 through Dynadot LLC and is hosted behind Cloudflare (AS13335). DNS resolution points to IP address 188.114.97.3, which is geolocated in the United States. The authoritative nameservers are aragorn.ns.cloudflare.com and roxy.ns.cloudflare.com, and the site employs Cloudflare services with HTTP/3 enabled. An SSL certificate issued by a public certificate authority is present, but the HTTP response returns a 403 status and the page title displays a 504 gateway‑time‑out message, suggesting the site is deliberately limiting access. Reputation data shows a Gridinsoft trust score of 0/100 and three of ninety‑four security vendors on VirusTotal have flagged the domain. It appears on three external blocklists, and its risk rating is classified as high. While the exact phishing payload has not been publicly disclosed, the combination of recent registration, low trust score, and detection by multiple security sources confirms a credible threat. Defenders should block the domain at network perimeter, update DNS filtering policies to deny resolutions to 188.114.97.3, and monitor for any related indicators of compromise. Continuous re‑evaluation is advised as additional threat intelligence may emerge.