zabeel1[.]ae

Analysis of the domain zabeel1.ae indicates it was operating as a generic phishing site targeting online shoppers. The domain resolved to IP address 82.197.90.4, hosted on AS47583 (Hostinger International Limited) in the United States. No SSL certificate was present, increasing the risk of data interception. The page title, 'Zabeel1 – online store,' suggests an attempt to impersonate a legitimate e-commerce platform, though the exact brand being mimicked remains unconfirmed due to lack of deeper content analysis.

Infrastructure analysis reveals the domain was registered through HOSTINGER operations, UAB, and used nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration commonly associated with low-cost or disposable hosting setups. The domain appears in one AlienVault OTX threat intelligence pulse and is flagged by 10 of 95 security vendors on VirusTotal, including PhishDestroy, which had already blocked it. Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. As of July 24, 2026, zabeel1.ae is offline, though its prior activity and detection history warrant continued monitoring.

Defenders should treat this domain as compromised and maintain blocklist entries. If the domain reactivates, network-level blocking of 82.197.90.4 and associated nameservers is recommended. No evidence links this domain to a specific phishing kit or advanced threat actor, but its hosting provider and registration pattern align with opportunistic, low-sophistication campaigns.