rappel4-agricole[.]com

The domain rappel4-agricole.com was registered on December 11, 2025 through CNOBIN INFORMATION TECHNOLOGY LIMITED and is currently taken offline. It resolves to the IP address 198.18.1.87 and is served by the authoritative name servers ns1.ezydomain.com and ns2.ezydomain.com. No SSL certificate is presented, indicating that any traffic to the site would have been unencrypted. The page title returned by the server is identical to the domain name, providing no additional context about the intended victim brand or lure.

Infrastructure analysis shows the domain is listed on a single security blocklist and is actively blocked by PhishDestroy. The Gridinsoft trust score of 0 out of 100 further corroborates its malicious reputation. VirusTotal scans have flagged the domain in nine out of ninety‑five security engines, reinforcing the classification as a phishing resource.

Defenders should immediately add rappel4-agricole.com to network and email filtering deny lists, block the associated IP 198.18.1.87, and monitor the two ezydomain.com name servers for any future re‑use of the same host. Because the site is offline, real‑time traffic observation is limited, but the presence on blocklists and low trust score suggest an active campaign that may reappear under a different subdomain or hosting provider. Continuous threat‑intel feeds should be consulted for any resurgence, and incident response teams should be prepared to investigate any user reports that reference this domain or its IP address.