creation-sitepro[.]fr

On 22 July 2026 the domain creation-sitepro.fr was flagged as a high‑risk brand‑impersonation site targeting Google. The site presents the page title “Creation SitePro Granville - Agence Web Normandie | Sites Internet Professionnels”, which does not reference Google but the intelligence feed categorises the domain as impersonating Google. The domain was registered through Gandi on 7 June 2025 and uses the nameservers ns-248-b.gandi.net, ns-26-a.gandi.net and ns-50-c.gandi.net. DNS resolution points to the address 34.111.179.208, an IP owned by Google LLC (AS396982) and located in the United States.

The web server returns an HTTP 200 response and employs a Let’s Encrypt certificate (issued by E7), HSTS, Google Cloud CDN, Google Cloud Trace and HTTP/3, indicating that the infrastructure is hosted on Google Cloud. Two of ninety‑five VirusTotal scanners have raised alerts, and the domain appears on the PhishDestroy and ScamSniffer blocklists, both of which label it as a tech‑support scam. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The combination of a valid TLS certificate, reputable cloud hosting, and a low trust score is a typical pattern for credential‑harvesting pages that rely on brand reputation to lure victims.

What remains uncertain is the exact content delivered to end users, because no visual analysis is available; the page title suggests a legitimate web‑agency offering, yet the branding claim toward Google indicates a deceptive overlay that may redirect visitors to a credential‑collection form or a remote‑support prompt. The presence on two independent blocklists, combined with the low Gridinsoft rating, provides strong evidence of malicious intent. Although the domain benefits from a legitimate SSL certificate, the certificate does not mitigate the risk because it is issued to the domain itself, not to Google, and the site’s content is not verified.