# asftmagb.sbs — SUSPICIOUS

> Beware of asftmagb.sbs, a phishing domain impersonating the official ASFINAG toll shop. Avoid interaction and verify official sources to stay safe.

## Summary
PhishDestroy identifies asftmagb.sbs as a medium-risk phishing domain impersonating the ASFINAG toll shop, aiming to deceive users into divulging sensitive information. This type of threat can lead to financial loss or identity theft.

The domain was registered through Dynadot LLC on February 23, 2026, and resolved to IP 188.114.97.3. It appeared on one security blocklist and was flagged by 4 out of 95 VirusTotal vendors before being taken offline, indicating partial detection by security tools.

Users are advised to avoid visiting asftmagb.sbs and to verify toll payment websites directly through official ASFINAG channels. If exposed, users should monitor accounts for suspicious activity and report phishing attempts to relevant authorities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: ASFINAG toll shop | official ASFINAG toll shop

## Domain Intelligence
- Registered: 2026-02-23 23:05:02
- Registrar: Dynadot LLC
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: georgia.ns.cloudflare.com vern.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["Emsisoft", "Netcraft", "SOCRadar", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/N6dQKvYw/959c8dab92f3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/afcd2fa2-2cdf-4dcf-986e-6055bd29be07
- Wayback Machine: https://web.archive.org/web/https://asftmagb.sbs
- PhishDestroy: https://phishdestroy.io/domain/asftmagb.sbs/
- LLM endpoint: https://phishdestroy.io/domain/asftmagb.sbs/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/asftmagb.sbs/
Last updated: 2026-03-19