rappel33-agricole[.]com

This domain, rappel33-agricole.com, is identified as a high-risk site primarily engaged in credential theft. Analysis indicates that the domain is actively attempting to capture user login credentials, potentially leading to unauthorized access to personal and financial accounts. The threat level is assessed as high, and the domain is currently active, posing a significant risk to users who visit the site.

Infrastructure analysis reveals that rappel33-agricole.com is flagged by 8 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion. The domain appears on one security blocklist and resolves to the IP address 198.18.1.86. It was registered through CNOBIN INFORMATION TECHNOLOGY LIMITED on December 11, 2025. The absence of an SSL certificate further increases the risk, as it lacks the necessary security measures to protect user data. The domain's recent creation and the use of a less reputable registrar are additional red flags that suggest it may be part of a targeted phishing campaign.

If users have visited rappel33-agricole.com, they are advised to immediately change passwords for any accounts that may have been compromised, particularly those used for financial or sensitive information. Users should also monitor their accounts for any unusual activity and consider enabling two-factor authentication (2FA) for added security. Reporting the incident to a trusted security service or the organization being impersonated can help mitigate the impact and prevent further damage.