bgo-t9-78[.]abscisses[.]ch

bgo-t9-78.abscisses.ch is a subdomain of abscisses.ch. PhishDestroy first observed the hostname on Aug 18, 2026. Stored content metadata identifies Fedex as the apparent target. The captured page title is “Sendung verfolgen | Schweiz”. Stored page analysis classifies the content as impersonation. Current evidence score: 95/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, Spamhaus DBL, Cloudflare Radar, and URLScan. VirusTotal recorded 15 detections among 91 engines: alphaMountain.ai, BitDefender, Cluster25, CRDF, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, LevelBlue, Lionic, MalwareURL, Seclookup, SOCRadar, Sophos, VIPRE on Aug 20, 2026 at 22:52 UTC. Spamhaus DBL: DBL_PHISH on Aug 18, 2026 at 06:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Fedex and assigned phishing as its category on Aug 18, 2026 at 05:08 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 21, 2026 at 10:20 UTC. Google Safe Browsing returned no flag on Aug 21, 2026 at 11:15 UTC.

The collector marked the hostname reachable on Aug 18, 2026 at 22:15 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 188.114.96.3 (AS13335 Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Oct 27, 2026; checked Aug 18, 2026 at 04:02 UTC.

The content indicators and 4 positive source findings support the current Fedex-themed impersonation classification.