bordereaudedepostsecurise[.]com

bordereaudedepostsecurise.com was registered on 21 February 2026 through AFRIREGISTER S.A. and resolves to the IPv4 address 95.216.38.171, which is announced by AS24940 (Hetzner Online GmbH) and geolocated to Finland. The domain is served by a default web server page that returns HTTP 200 and presents a Plesk‑issued SSL certificate. DNS configuration lists the authoritative nameservers go1.001.africa and go2.001.africa, and an MX record (priority 10) points to mail.bordereaudedepostsecurise.com. Threat intelligence indicates the site is currently active and classified as generic_phishing with a high risk rating. VirusTotal scans have yielded 20 positive detections out of 93 vendors, and the domain is listed on two public phishing blocklists, including PhishDestroy and PhishingDB. Additional correlation shows inclusion in fifteen AlienVault OTX pulses and a Gridinsoft trust score of zero. The combination of recent registration, hosting on a reputable provider, and multiple detections suggests a deliberately crafted phishing infrastructure. Defenders should block the domain and associated IP, monitor for DNS queries to the listed nameservers and MX host, and consider adding the indicator to internal reputation feeds. Ongoing observation is recommended to detect any evolution of the payload or target selection, as the current public page provides no further functional details.