aujhmv[.]com

This domain is an active phishing infrastructure specifically designed to impersonate Société Générale's online banking portal, targeting customers with fraudulent login pages. Analysis of the page title 'Société Générale | Connexion' and the domain's behavioral patterns indicates a credential harvesting operation, where victims are prompted to enter sensitive banking details that are subsequently captured by threat actors. The site employs social engineering tactics typical of financial phishing, including replica branding and urgent authentication requests, to deceive users into disclosing their credentials, which can lead to unauthorized account access and financial fraud. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain aujhmv.com was registered on May 23, 2026, through IONOS SE, an unusually future-dated creation that may indicate automated registration abuse. It currently resolves to IP address 82.165.104.102 and is flagged by 16 out of 95 security vendors on VirusTotal, with additional detections on one security blocklist. The domain is actively blocked by enterprise phishing protection systems and has been classified as phishing by Google Safe Browsing. The SSL certificate, issued by Let's Encrypt (identifier YR2), provides encryption to lend legitimacy to the fraudulent site, while the hosting infrastructure remains operational despite multiple detections. Users who have visited aujhmv.com or entered credentials on the site should immediately take corrective actions to mitigate risk. All potentially exposed banking credentials should be changed through official Société Générale channels, using verified URLs or mobile applications. Affected users are advised to monitor their accounts for unauthorized transactions and enable multi-factor authentication if not already active. Financial institutions should be notified of potential credential compromise, and any devices used to access the phishing site should undergo security scanning to detect possible malware infections. Organizations should update their security controls to block this domain and its associated IP address (82.165.104.102) at the network perimeter to prevent further exposure.