asfinaq[.]at

This domain, asfinaq.at, is currently flagged as a high‑risk generic phishing site. VirusTotal records show that five out of ninety‑one scanned security vendors have identified malicious behavior, indicating a partial but notable detection consensus. An HTTP request to the root URL returns a 301 redirect response, a pattern often used to forward victims to credential‑harvesting pages or to obscure the final landing location. The domain appears on a single external blocklist and is actively blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed considers it malicious.

The overall status remains active, meaning the domain continues to resolve and serve content despite the blocklist entries. Available intelligence does not include registrar details, hosting IP, SSL certificate information, or page title, limiting the depth of infrastructure profiling. Consequently, the full scope of the phishing infrastructure, including potential command‑and‑control hosts or associated domains, cannot be established at this time.

Defenders should prioritize immediate containment by adding asfinaq.at to outbound web‑filter deny lists and ensuring that any internal proxy or DNS sinkhole policies reference the blocklist entry that already flags the domain. Continuous monitoring of DNS query logs for repeated lookups to this host is advised, as is periodic re‑scanning on VirusTotal to capture any changes in vendor detection rates. Given the high risk rating and the confirmed redirect behavior, proactive blocking is recommended to mitigate credential‑theft exposure.