abg276[.]it

Analysis of the domain abg276.it, as of the report date July 23 2026, shows a recent registration (creation date February 21 2026) and a rapid deployment of phishing‑related infrastructure. The domain presents an SSL certificate identified as WE1, indicating a self‑issued or low‑reputation certificate. DNS resolution points to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The hosting choice suggests the operators are leveraging Cloudflare’s CDN and protection services to obscure the true origin of the payload. The site’s only observable attribute is the page title “Welcome aboard,” which provides no direct indication of the targeted brand or credential‑harvesting methodology.

Security telemetry records the domain on a single blocklist and confirms that PhishDestroy has taken it offline. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of malicious intent. VirusTotal analysis reports that two of ninety‑three scanning engines flagged the domain, offering the only vendor‑level detection evidence available. The combination of a low trust score, blocklist presence, and limited vendor detections aligns with the elevated risk rating assigned to the domain.

Uncertainty remains regarding the exact phishing vector, payload content, and whether any active command‑and‑control communication was established before the takedown, as the site is currently offline and no further HTTP response data is available. Defenders should proactively block the domain and its associated IP address at perimeter firewalls and DNS filtering solutions. Continuous monitoring of DNS queries for the domain and its IP, as well as periodic re‑scanning on VirusTotal or similar platforms, is advised to capture any resurgence or re‑use of the infrastructure. Organizations should also consider updating threat‑intel feeds with the observed indicators to improve detection of related campaigns.