asfenaqb[.]sbs

Analysis of the domain asfenaqb.sbs indicates it was established as a generic phishing site on November 20, 2025, registered through Web Commerce Communications Limited. The domain resolved to the IP address 104.21.0.216, hosted on Cloudflare's network (AS13335) in the United States. No SSL certificate was detected, increasing the risk of unencrypted credential interception. Nameservers carlos.ns.cloudflare.com and maya.ns.cloudflare.com were configured, consistent with Cloudflare proxy services. As of July 24, 2026, the domain appears on one security blocklist and is flagged by PhishDestroy.

Gridinsoft assigned a trust score of 0/100, reflecting high suspicion. VirusTotal records indicate that 7 out of 95 security vendors classified the domain as malicious, though the exact nature of the phishing content remains unconfirmed due to the site being offline at the time of analysis. No specific brand impersonation or phishing kit has been identified in available data. Defenders should treat this domain as a confirmed phishing threat.

Network-level blocking is recommended for 104.21.0.216 and related Cloudflare-resolved IPs associated with this campaign. Organizations using Cloudflare proxy services should review logs for connections to this domain or IP. Registrar abuse contacts at Web Commerce Communications Limited may be notified for potential takedown actions, though historical patterns suggest such domains are often short-lived. Further investigation into associated infrastructure may reveal additional linked phishing domains registered through the same registrar.