duplicate-disabled-11876.invalid

This domain, www.app.asterdex-dev.xyz, operates as a high-risk crypto drainer specifically designed to target users of the Across protocol. Analysis indicates the site employs the Angel Drainer kit, a specialized malicious toolset used to siphon cryptocurrency assets from victims' wallets by exploiting deceptive transaction prompts and signature requests. The page mimics the branding of Aster, a legitimate perpetual decentralized exchange (DEX), presenting itself as "The next-gen perp DEX for all traders" to establish credibility and trick users into connecting their wallets. Once connected, the drainer initiates unauthorized transactions, transferring assets to attacker-controlled addresses without user consent. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain was registered on September 28, 2025, through OwnRegistrar, Inc., a registrar frequently associated with phishing and fraudulent domains. It resolves to the IP address 192.3.190.189, hosted on AS36352 (HostPapa) in the United States, and currently appears on one security blocklist. VirusTotal detections show 10 out of 95 security vendors flagging the domain as malicious, with classifications including phishing, fraud, and crypto-related threats. Notably, the domain lacks a valid SSL certificate, further reducing its legitimacy and increasing the risk of interception or manipulation of user data. Users who visited www.app.asterdex-dev.xyz or connected their wallets to the site should take immediate action to mitigate potential losses. First, revoke any active wallet connections or approvals granted to the domain using a blockchain explorer or wallet management tool. Next, transfer all remaining assets to a new, secure wallet address not previously exposed to the malicious site. Monitor transaction history for unauthorized activity and report any suspicious transactions to the relevant blockchain network or security platforms. Given the high-risk nature of crypto drainers, affected users are advised to assume compromise and act swiftly to prevent further asset loss.