id-webmail-0ramg[.]abgespacedrp[.]de

The domain id-webmail-0ramg.abgespacedrp.de is currently marked as active and is classified as a generic phishing site. Infrastructure analysis shows the domain is hosted on Cloudflare’s DNS infrastructure, using the authoritative nameservers cloe.ns.cloudflare.com and rex.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.96.3, a host that is frequently shared by malicious actors leveraging Cloudflare’s edge network for anonymity and rapid deployment.

The domain appears on one external blocklist, specifically PhishDestroy, indicating that at least one security feed has already flagged it for phishing‑related activity. A VirusTotal scan has been performed by 95 AV engines; while none of the engines reported a detection, the absence of a positive result does not constitute evidence of safety and should be interpreted as a lack of current signatures rather than a clean bill of health. No additional public metadata such as SSL certificate details, HTTP response codes, page titles, or brand targeting information is available, leaving the content of the hosted site unverified.

Consequently, the primary observable indicators are the blocklist entry, the Cloudflare nameserver usage, and the association with the IP address 188.114.96.3. Defenders should consider adding the domain to internal deny‑lists, monitoring traffic to the associated IP, and employing DNS‑level blocking for the identified nameservers. Continuous re‑scanning with multi‑engine services and periodic checks against emerging blocklists are recommended to capture any future changes in the domain’s behavior or payload distribution.