reservation[.]abkabane[.]digital

Analysis of reservation.abkabane.digital indicates a credential phishing campaign targeting Google users, as confirmed by its page title 'Webmail Login' and explicit classification in threat intelligence sources. The domain was registered through Cloudflare, Inc. and resolved to IP 172.67.186.180, hosted on Cloudflare's network (AS13335). No SSL certificate was present, increasing the risk of unencrypted credential interception. At the time of assessment on July 23, 2026, the domain was offline, though prior detection data remains relevant for historical context.

Security vendor analysis on VirusTotal revealed 14 of 95 engines flagging the domain as malicious, while it appeared on one security blocklist, specifically PhishDestroy. The absence of nameservers (NS_NOT_FOUND) suggests potential infrastructure misconfiguration or deliberate evasion tactics. The domain's registration under Cloudflare, combined with its hosting on the same provider's network, may indicate an attempt to leverage Cloudflare's protective services to obscure malicious activity. Defenders should treat this domain as a confirmed phishing threat targeting Google credentials.

While currently offline, its infrastructure and detection history warrant inclusion in blocklists and monitoring for potential reactivation. The lack of SSL further underscores the need for caution, as any credentials submitted would likely be transmitted in plaintext. No additional brand impersonation evidence beyond the page title and scam type classification is available, and the exact phishing kit or lure content remains unanalyzed. Organizations should review logs for connections to 172.67.186.180 and the domain itself, particularly from users who may have encountered the 'Webmail Login' page.