mercadona[.]abb-dev[.]fr

Analysis of the domain mercadona.abb-dev.fr indicates active phishing infrastructure targeting retail customers, as evidenced by its presence on one security blocklist and its classification by PhishDestroy. The domain resolves to the IP address 109.234.164.172 and was registered on August 21, 2022, through the registrar SCALEWAY. Nameservers are configured as ns1.o2switch.net and ns2.o2switch.net.

As of July 29, 2026, the domain remains active, though no detections were reported by the 91 vendors that scanned it on VirusTotal—this absence of flags does not confirm safety. The domain's registration details and hosting provider do not align with legitimate retail operations, suggesting it is not an official or authorized site. Defenders should treat this domain as malicious until further analysis confirms otherwise.

Network security teams are advised to block traffic to and from 109.234.164.172 and monitor for connections involving mercadona.abb-dev.fr. Additional scrutiny of related subdomains under abb-dev.fr may be warranted, as the parent domain could host further malicious activity. The exact content and phishing kit in use have not yet been analyzed, and the specific retail brand being impersonated cannot be confirmed without further evidence.