infos4-agricole[.]com

The domain infos4-agricole.com was registered on December 12, 2025 through CNOBIN INFORMATION TECHNOLOGY LIMITED and is currently taken offline. DNS resolution points to the single address 198.18.1.79 and the authoritative name servers are magdalena.ns.cloudflare.com and marty.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. No TLS certificate is presented for the host, which means HTTPS connections are not available and any client interaction would occur over clear‑text HTTP. VirusTotal records show that two out of ninety‑five scanned security vendors flagged the domain, suggesting the presence of malicious indicators, though the low number of detections does not provide a definitive classification.

The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the suspicion of phishing activity. Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high confidence in the domain’s malicious intent. The page title returned by the server is simply "infos4-agricole.com," providing no additional context about the targeted brand or the nature of the content hosted. Taken together, the evidence points to a newly created phishing infrastructure that leverages Cloudflare’s DNS for rapid deployment and has already attracted detection by multiple security vendors and blocklists.

Uncertainty remains regarding the exact phishing payload, the specific victim‑targeting methodology, and whether any credential‑stealing forms were ever served before the domain was taken offline. Defensive operators should continue to block the IP address 198.18.1.79 and add infos4-agricole.com to local deny lists, monitor Cloudflare name server changes for possible re‑use, and incorporate the domain into threat‑intel feeds used by email gateways and web proxies.