assitant-luc-jean-info[.]netlify[.]app

The domain assitant-luc-jean-info.netlify.app is flagged as a brand‑impersonation site targeting Credit Agricole. Technical analysis shows the domain resolves to 18.208.88.157, an Amazon.com, Inc. host located in the United States and assigned to AS14618. The site was hosted on Netlify, as indicated by the registrar information and the presence of Netlify‑specific technology tags, including HSTS enforcement. The TLS certificate in use is a DigiCert Global G2 RSA SHA256 2020 CA1 certificate issued by DigiCert Inc., confirming a valid HTTPS configuration despite the malicious purpose. An HTTP request returns a 404 status, consistent with the current offline state.

The page title observed during the brief scan reads "Accès à votre caisse régionale - Crédit Agricole," directly referencing the targeted brand. VirusTotal recorded 15 detections out of 95 security vendors, demonstrating a moderate level of consensus among scanning engines that the domain is malicious. It appears on one external security blocklist and has been added to the PhishDestroy blocklist, reinforcing its classification as a threat. Scamadviser assigns a trust score of 1 / 100, reflecting extremely low legitimacy. Nameserver records point to dns1.p04.nsone.net and dns2.p04.nsone.net, confirming the hosting infrastructure.

The primary gaps in the current intelligence are the lack of a detailed payload sample and the absence of observed phishing page content beyond the title, leaving the exact user‑interaction flow undocumented. Defenders should immediately block the domain at network perimeters, update URL filtering lists with the observed indicators, and monitor for any outbound connections to the associated IP address. Incident response teams should also consider searching internal logs for any traffic to this domain or the Netlify‑hosted IP range, as compromised credentials may have been attempted.