asterdex-claim[.]pages[.]dev

The domain asterdex-claim.pages.dev was created on February 21, 2026 and is currently taken offline. Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which is allocated to AS13335 Cloudflare, Inc. and located in the United States. The DNS zone is served by Cloudflare nameservers christina.ns.cloudflare.com and arturo.ns.cloudflare.com, and the site presents an SSL certificate issued by Google Trust Services under the WE1 brand, confirming use of a valid HTTPS endpoint. HTTP response headers indicate the presence of HTTP/3 and HSTS, consistent with a modern Cloudflare deployment.

Reputation data reveal that the page title returned by the server is "Suspected phishing site | Cloudflare," and the classified scam type is a crypto scam, aligning with the reported threat label of a crypto drainer. Five of ninety‑three security vendors on VirusTotal flagged the domain, providing limited but corroborating malicious intent signals. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist, confirming that at least one external feed has identified it as malicious. PhishDestroy has also blocked the domain, reinforcing its classification as a phishing‑related resource.

The HTTP status code observed was 403, indicating that direct access is denied, yet the presence of the phishing page title suggests that the site previously served malicious content before being taken offline. No additional evidence such as payload hashes, command‑and‑control endpoints, or victim artefacts is available in the current intelligence set, leaving the exact operational details of the crypto draining activity uncertain.

Defenders should continue to block asterdex-claim.pages.dev at network perimeters and include the associated IP 188.114.97.3 in deny lists. Monitoring of Cloudflare‑hosted subdomains and related ASN traffic is advised, as the infrastructure can be rapidly re‑used for new malicious domains.