infos1-agricole[.]com

Analysis of infos1-agricole.com indicates a phishing domain targeting Crédit Agricole customers, currently offline as of July 24, 2026. The domain was registered on December 12, 2025, through CNOBIN INFORMATION TECHNOLOGY LIMITED and uses Cloudflare nameservers (jade.ns.cloudflare.com, piotr.ns.cloudflare.com). It previously resolved to 193.24.123.162, an IP address hosted in Russia under AS200593 (PROSPERO OOO). No SSL certificate was detected, increasing the risk of unencrypted credential interception.

The domain appears on one security blocklist, and PhishDestroy has flagged it for malicious activity. VirusTotal shows a single detection from 95 vendors, though this does not confirm widespread consensus. The HTTP response returned a 404 page title, suggesting either takedown or temporary inactivity. Infrastructure analysis reveals a short-lived domain (under eight months old) with no legitimate association to Crédit Agricole, a French banking institution.

Defenders should treat this domain as compromised and block it at the DNS or proxy level. Further monitoring is recommended to track potential re-emergence under the same or similar infrastructure. No evidence of a phishing kit or additional brand impersonation was identified in the available data.