agroplasticosla15[.]com

Analysis of agroplasticosla15.com indicates it is an active credential phishing domain registered on February 21, 2026, through Atak Domain. The domain resolves to 147.124.217.106, hosted on AS396073 (Majestic Hosting Solutions, LLC) in the United States. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, jQuery, and Google Analytics, alongside HTTP/3 support. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. The page title, 'Page Not Found - Agroplasticos la 15 SAS,' suggests a possible impersonation attempt, though the exact content and target are not yet confirmed. The domain is flagged by 10 of 93 security vendors on VirusTotal and appears in two AlienVault OTX threat intelligence pulses, reinforcing its classification as malicious. It is also blocked by PhishDestroy and listed on one security blocklist, with a Gridinsoft trust score of 0/100. Nameservers (uk.apiname.com and cn.apiname.com) are consistent with bulletproof hosting patterns, often used to evade takedowns. The domain remains active as of July 12, 2026, returning an HTTP 200 status, which may indicate a live phishing page or a placeholder awaiting deployment. Defenders should treat this domain as high-risk. Block access at the network level, monitor for connections to the IP and nameservers, and investigate any credentials submitted to this domain. Further analysis of the page content is recommended to confirm the specific phishing kit or targeted brand, though no definitive evidence of either is currently available.