asterdexx[.]world

The domain asterdexx.world was registered on February 21, 2026 and is presently taken offline. DNS resolution points to the IPv4 address 192.3.190.187, which belongs to the HostPapa network (AS36352) located in the United States. The TLS certificate presented is labeled R12, indicating a low‑trust or self‑signed issuance. HTTP requests to the host return a page whose title is “Aster airdrop”, matching the known phishing kit classification of an airdrop‑style crypto scam. The site explicitly claims to impersonate the BNB Chain brand, aligning with the reported brand‑target field.

Three of ninety‑three VirusTotal scanners raised a detection, and the domain is listed on a single external blocklist. PhishDestroy has also flagged the host, confirming its status as a malicious resource. Independent reputation scoring by Gridinsoft assigns a trust rating of 0 out of 100, reinforcing the high confidence of abuse. The observable indicators suggest a purpose‑built infrastructure for a cryptocurrency airdrop lure designed to harvest private keys or credentials from users seeking BNB Chain rewards.

No further forensic artifacts such as JavaScript payloads, external redirects, or credential‑submission endpoints have been released publicly, leaving the exact capture mechanism uncertain. Defenders should block any outbound connections to 192.3.190.187 and add asterdexx.world to DNS and URL filtering policies. Security operations should monitor for similar “Airdrop” page titles and for newly registered domains that resolve to HostPapa AS36352, as these patterns have recently correlated with brand‑impersonation campaigns. Continuous re‑evaluation of VirusTotal and other sandbox feeds is recommended to capture any future re‑hosting attempts.