asterdexnetwork[.]com

This domain, asterdexnetwork[.]com, is actively impersonating Across Protocol, a known decentralized bridging platform. Registered on October 12, 2025, through a major registrar, the domain remains operational as of July 12, 2026, resolving to the IP address 92.204.70.5. Analysis indicates a high-risk classification due to its presence on three security blocklists, including PhishDestroy, InversionDNS, and BLP-Malware, alongside a low trust score of 100/100 from Scamadviser and 100/100 from Gridinsoft. The page title, 'Aster Dex Network,' suggests an attempt to mislead users into believing it is a legitimate decentralized exchange or protocol interface, though the exact content and functionality of the site have not yet been analyzed in depth. Infrastructure analysis reveals the domain is flagged by 12 out of 95 security vendors on VirusTotal, with Google Safe Browsing specifically labeling it under 'SOCIAL_ENGINEERING.' Additionally, the domain appears in 23 threat intelligence pulses on AlienVault OTX, indicating widespread recognition of its malicious nature within the cybersecurity community. The combination of brand impersonation, low trust scores, and multiple blocklist inclusions strongly suggests this domain is being used for fraudulent activities targeting users of Across Protocol or similar platforms. What remains uncertain is the specific mechanism of compromise, such as whether the site hosts a credential harvester, fake token swap interface, or other deceptive tools. Defenders should treat this domain as hostile and prioritize blocking it at the network level. Organizations utilizing Across Protocol or managing decentralized finance (DeFi) infrastructure are advised to proactively monitor for references to asterdexnetwork[.]com in logs, emails, or communications, as it may be leveraged in phishing campaigns. Users should be educated to recognize the domain as fraudulent and avoid interacting with it under any circumstances.