divine-nobodies[.]com

This domain, divine-nobodies.com, is identified as a credential theft operation impersonating Société Générale, a major French banking and insurance institution. The page title, 'SG - Banque et Assurance au plus proche de vous,' directly mimics the legitimate brand's identity to deceive users into submitting login credentials, personal information, or financial details. No crypto drainer or payment skimming components were observed in initial scans, though credential harvesting remains the primary objective. The infrastructure appears designed for short-term, high-impact campaigns targeting French-speaking users. Analysis indicates the domain was registered through Squarespace Domains II LLC on May 9, 2020, and resolves to the IP address 15.188.200.112. Detection metrics reveal significant security vendor recognition, with 17 out of 95 engines flagging the domain on VirusTotal. The domain appears on one security blocklist and has been referenced in two AlienVault OTX threat intelligence pulses. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its free and automated issuance process. Gridinsoft assigns a trust score of 0/100, further corroborating the domain's malicious classification. As of the latest assessment, divine-nobodies.com has been taken offline, likely in response to security vendor enforcement or registrar intervention. The domain was blocked by PhishDestroy, and no active resolution is currently observed. Despite its offline status, residual risk persists due to potential cached DNS records, delayed blocklist updates, or secondary domains operating under similar infrastructure. Users who may have interacted with the site are advised to reset credentials for any associated financial accounts, monitor for unauthorized transactions, and verify the legitimacy of communications claiming to originate from Société Générale.