asterdex-cialm[.]com
“Aster airdrop”
证据摘要
The domain asterdex-cialm.com was registered on October 20, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently reported as taken offline. Infrastructure analysis shows the domain resolves to the IP address 172.67.212.7, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The site presented a page titled "Aster airdrop" and employed an Airdrop Scam phishing kit, indicating a crypto‑focused scam that targets users of the BNB Chain platform. The SSL certificate presented for the domain is identified as WE1, confirming the use of HTTPS during its active period.
Malware and URL reputation services have flagged the domain: eleven of ninety‑three VirusTotal scanners reported detections, and the domain appears on a single security blocklist. PhishDestroy has actively blocked the domain, and Gridinsoft assigned a trust score of zero out of one hundred, reflecting a high confidence in its malicious nature. The primary threat vector is brand impersonation of the BNB Chain ecosystem, attempting to lure victims with a purported airdrop.
While the site is no longer reachable, the observed indicators—registrar details, Cloudflare IP, SSL certificate, detection counts, and low trust score—provide actionable intelligence for defensive teams. Analysts should ensure that network and endpoint sensors block the IP 172.67.212.7 and any future resolution to that address, update URL filtering rules to include the domain, and monitor for similar airdrop‑kit deployments that reference BNB Chain. Continued observation of the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED may reveal additional related domains, and threat‑intel feeds should be consulted for any resurgence of the airdrop scam pattern.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
已存储的结果证据
处置结果与下线归因
- 结果
held- 可用性
unreachable- 原因
registrar_client_hold- 执行方
- NICENIC INTERNATIONAL GROUP CO., LIMITED
- 机制
client_hold- 置信度
- 95%
- 首次观测
- 最新观测
预计不可用时间
直至不可用的时间: 0 h证据 SHA-256 eab0dec21c70
检测时间线
-
可用性
首次存储值:DNS 非活动
f93a11f87e4d -
可用性
DNS 非活动 → 未知
8931a688ecbc -
可用性
未知 → DNS 非活动
83d0e102089a -
可用性
DNS 非活动 → 已保留
9279696bc6b3 -
可用性
已保留 → DNS 非活动
f52d526b76a1 -
可用性
DNS 非活动 → 未知
80be41a47891 -
可用性
未知 → 已保留
9cd07c820e7a -
可用性
已保留 → 未知
d49faa840a80 -
可用性
未知 → DNS 非活动
6dfe9145995c -
可用性
DNS 非活动 → 已保留
8559120a836a
显示全部(9)
-
可用性
已保留 → DNS 非活动
641ed81dc4d5 -
可用性
DNS 非活动 → 未知
ff767d985d86 -
可用性
未知 → 已保留
b16fa894c99e -
可用性
已保留 → 未知
835a22078a12 -
可用性
未知 → DNS 非活动
d0b7046e8c2f -
可用性
DNS 非活动 → 已保留
64497756c8b5 -
可用性
已保留 → DNS 非活动
ca9ed662b468 -
可用性
DNS 非活动 → 未知
23db9ef68437 -
可用性
未知 → 已保留
eab0dec21c70
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
取证情报
VirusTotal 分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控