# agri-link.ca — MALICIOUS

> Discover the risks behind agri-link.ca, an active medium-level phishing domain. Learn how it operates and steps to protect your data.

## Summary
PhishDestroy identifies agri-link.ca as an active domain involved in generic phishing activities, posing a medium threat to users. While the domain has been online since 2014, recent scans reveal that several security vendors have flagged it as suspicious, signaling potential risks for unsuspecting visitors.

This phishing scheme typically deceives users by mimicking legitimate websites to steal sensitive information such as login credentials and personal data. By resolving to the IP 192.185.116.148 and using deceptive content, agri-link.ca attempts to lure victims into submitting confidential details, potentially leading to identity theft or financial loss.

If you have accessed agri-link.ca, it is crucial to immediately review your accounts for unauthorized activity and change any passwords that might have been compromised. Running a full malware scan on your device and remaining vigilant for phishing attempts in emails or messages are recommended next steps to ensure your digital safety.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: 509 Bandwidth Limit Exceeded

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Netfirms, LTD
- IP: 192.185.116.148
- IP Country: US
- IP City: Ashburn
- IP Org: AS31898 Oracle Corporation
- Nameservers: ["ns1.lithiumservers.net", "ns2.lithiumservers.net"]
- SSL Issuer: Let's Encrypt / R12

## Detection Status
- VirusTotal: 8 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "CRDF", "CyRadar", "Fortinet", "Gridinsoft", "SafeToOpen", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Agri-link Courriel : Mot de passe Vous avez oublié votre mot de passe Agri-link Provimi Pour accéder à la plateforme Agri-link Provimi Cliquez ici © 2016 – Cargill. Tous droits réservés.

### Form Fields
- submit
- text
- password
- table
- username
- return
- hidden

### External Links
- http://provimi.agri-link.ca/login.php

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc280-9c43-758e-acc6-cadb1d2e2344.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/agri-link.ca
- Wayback Machine: https://web.archive.org/web/https://agri-link.ca
- PhishDestroy: https://phishdestroy.io/domain/agri-link.ca/
- LLM endpoint: https://phishdestroy.io/domain/agri-link.ca/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/agri-link.ca/
Last updated: 2026-03-16