ficheclasse2025[.]fr

Analysis of the domain ficheclasse2025.fr indicates it was registered on July 1, 2025, through KEY-SYSTEMS GmbH and configured to use Cloudflare nameservers harley.ns.cloudflare.com and maya.ns.cloudflare.com. The domain resolved to the IP address 104.21.80.1, which is part of AS13335 (Cloudflare, Inc.) and geolocated in the United States. No SSL certificate was detected at the time of assessment, increasing the risk of unencrypted credential interception. The page title 'MaFicheClasse' suggests an attempt to impersonate a student or academic portal, though the exact target brand or institution is not confirmed in available data.

Infrastructure analysis reveals the domain was flagged by one security blocklist and detected by 2 of 95 security vendors on VirusTotal, indicating elevated suspicion but not widespread consensus. The domain was taken offline by July 23, 2026, following its inclusion in the PhishDestroy blocklist. Defenders should treat this domain as part of a generic phishing campaign targeting educational or student-related credentials.

While the page content remains unanalysed, the combination of Cloudflare hosting, recent registration, and absence of SSL aligns with common phishing infrastructure patterns. Network administrators are advised to block the domain and IP 104.21.80.1, monitor for related subdomains, and review logs for connections to this infrastructure. Further investigation into the registrar's abuse response and any associated malware samples is recommended to determine the full scope of the campaign.