amd-reserve[.]site

The domain amd-reserve.site was created on 18 April 2025 through the NameCheap registrar. It is configured to use Cloudflare’s authoritative nameservers gina.ns.cloudflare.com and mark.ns.cloudflare.com, and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate was observed, indicating that the site operated over plain HTTP only. The page title retrieved during the brief crawl reads “Transforming Travel with Amadeus’ Cutting-Edge Technology,” suggesting an attempt to masquerade as content related to the Amadeus travel‑technology brand, although the actual page content has not been examined. Reputation checks show a Gridinsoft trust score of 0 out of 100, reflecting an extremely low confidence rating.

VirusTotal recorded detections from 2 of 95 scanning engines, confirming that at least a subset of security products identified the domain as malicious. The domain is listed on a single external blocklist and has been actively blocked by the PhishDestroy service. Current operational status is offline, so no live HTTP response can be verified at the time of this report. Analysis indicates that the infrastructure—Cloudflare front‑end, US‑based IP, lack of SSL, and low trust score—is consistent with a typical generic phishing deployment that leverages reputable hosting to hide malicious activity. However, because the site is no longer reachable, details such as the exact phishing kit, credential‑harvesting form, or any payload delivery mechanisms remain unknown.

Defenders should add amd-reserve.site to network‑level deny lists and ensure that DNS resolvers return NXDOMAIN or a sinkhole address for the domain. Web filtering solutions should be updated to block any HTTP requests to the identified IP address and to flag the observed page title pattern.