asfelage[.]sbs

The domain asfelage.sbs was registered on February 22, 2026 through Dynadot LLC and is currently marked as offline. DNS resolution points to the IP address 104.21.77.211, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are delilah.ns.cloudflare.com and elijah.ns.cloudflare.com, indicating that the domain relies on Cloudflare’s DNS and possibly its edge services. No SSL certificate was observed for the site, meaning that any traffic to the domain would have been transmitted over HTTP without encryption, a characteristic often exploited in credential‑stealing campaigns.

The page title captured from the site reads "ASFINAG‑Mautshop für Digitale Vignette und Digitale Streckenmaut | offizieller ASFINAG‑Mautshop," suggesting an attempt to impersonate the Austrian toll operator ASFINAG. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, providing additional independent confirmation of malicious intent.

While the exact content of the page has not been examined, the combination of a brand‑spoofing title, lack of TLS, Cloudflare hosting, and multiple detections strongly indicates a phishing operation targeting users seeking digital toll vouchers. Defenders should continue to block the domain at network perimeter devices, update URL filtering rules to include asfelage.sbs, and monitor for any resurgence of activity. Analysts should also verify whether any related subdomains or CNAME records are being leveraged, and consider sharing the indicator set with threat‑sharing communities to aid broader detection.