rewards-asterdex[.]xyz

This domain, rewards-asterdex.xyz, is currently under investigation for credential harvesting phishing activity. Analysis indicates the site is designed to impersonate legitimate authentication portals, tricking users into submitting sensitive login credentials or financial information. The threat type is categorized as generic_phishing with a focus on credential theft, a common tactic in targeted financial fraud campaigns. Infrastructure analysis reveals the domain was registered on June 10, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The site is hosted behind Cloudflare, utilizing Cloudflare Browser Insights and HTTP/3 protocols, which may obscure its true origin and complicate tracking. Detection metrics show the domain appears on three security blocklists, including MetaMask, PhishDestroy, and SEAL, while VirusTotal reports 0 out of 95 detections, suggesting it has evaded widespread automated detection thus far. The Gridinsoft trust score of 0 out of 100 further corroborates its malicious classification. AlienVault OTX intelligence indicates the domain has been referenced in two threat intelligence pulses, signaling active monitoring by security researchers. To mitigate risks associated with this credential harvesting phishing domain, organizations and users should immediately block access to rewards-asterdex.xyz at the network level. Security teams are advised to monitor for any attempts to access the domain within logs, particularly from endpoints that may have interacted with phishing emails or malicious advertisements. End-users should be educated on recognizing phishing indicators, such as suspicious domain names, unsolicited authentication requests, and mismatched URLs. Additionally, multi-factor authentication (MFA) should be enforced for all critical accounts to reduce the impact of credential theft. Given the domain's use of Cloudflare, defenders may need to analyze associated IP ranges or historical DNS records to identify related infrastructure.