rappel6-agricole[.]com

Analysis as of July 24, 2026 shows that the domain rappel6-agricole.com was registered on 11 December 2025 through CNOBIN INFORMATION TECHNOLOGY LIMITED and uses the ezydomain.com name servers ns1.ezydomain.com and ns2.ezydomain.com. The domain resolves to the IPv4 address 193.24.123.162, which belongs to AS200593 (PROSPERO OOO) located in Russia. No TLS certificate is presented, indicating that the site is served only over HTTP. An HTTP request returned a 404 page title, suggesting that the expected content is not publicly reachable.

The Gridinsoft trust score is 0 out of 100, and the domain appears on a single security blocklist. VirusTotal scans report that six of ninety‑five antivirus engines flagged the domain, reinforcing its malicious reputation. The domain is currently listed as offline by PhishDestroy, and it has been taken down. The combination of recent registration, low trust score, Russian hosting, lack of encryption, and multiple vendor detections points to a generic phishing infrastructure that was likely used to lure victims before being seized.

At present, the exact phishing campaign, targeted brand, or phishing kit cannot be confirmed because no page content beyond the 404 title is available. Defenders should continue to block the IP address 193.24.123.162 and the domain itself at DNS and proxy layers, monitor for any re‑registration attempts, and update intrusion detection signatures with the observed registrar, name server, and ASN attributes. Additional investigation of the six positive VirusTotal detections may yield indicators of compromise that can be shared with threat‑intel communities.