rappel1-agricole[.]com

Analysis as of July 24 2026 indicates that the domain rappel1-agricole.com was registered on 11 December 2025 through CNOBIN INFORMATION TECHNOLOGY LIMITED and is hosted on the IP address 198.18.1.83. The authoritative name servers are ns1.ezydomain.com and ns2.ezydomain.com. No TLS certificate is present, meaning the site is served only over HTTP. The page title returned by the server is “rappel1-agricole.com”, and the site is currently taken offline, which is reflected in the HTTP status.

VirusTotal records show that five of ninety‑five scanning engines have flagged the domain, suggesting a moderate level of malicious confidence. Additional reputation services corroborate the risk: Gridinsoft assigns a trust score of 0 out of 100, PhishDestroy has listed the domain as blocked, and it appears on one other security blocklist. The lack of an SSL certificate, combined with the low trust score and multiple detections, aligns with typical characteristics of generic phishing infrastructure. Because the domain is already offline, immediate mitigation actions such as DNS sink‑holing or firewall rule updates are not required to stop active traffic, but defenders should retain the indicator in blocklists to prevent future resurrection or reuse.

Continuous monitoring of the IP address 198.18.1.83 and the associated name servers is advisable, as the hosting provider could be leveraged for additional malicious domains. Organizations employing web‑filtering solutions should ensure that the domain is added to their deny lists, and threat‑intel feeds should be updated with the observed detections. Until the site content is publicly archived, the exact phishing payload or targeted brand cannot be confirmed, and further analysis should be performed if the domain reappears.