dashboard[.]evreuxnormandie[.]fr

This domain, dashboard.evreuxnormandie.fr, is flagged as a high-risk generic phishing site targeting users of a portal identified by the page title 'LENA'. Analysis indicates the domain was registered on June 5, 2015, through OVH and is currently active. It resolves to IP 164.132.228.216, hosted on AS16276 (OVH SAS) in France. The domain uses nameservers dns13.ovh.net and ns13.ovh.net, consistent with OVH-managed infrastructure. A 307 HTTP status code suggests temporary redirection, which may be used to evade detection or redirect victims to malicious endpoints.

Two of 93 security vendors on VirusTotal have flagged this domain, and it appears on two security blocklists: PhishDestroy and ScamSniffer. The Gridinsoft trust score is 0/100, reinforcing its classification as malicious. Detected technologies include Node.js, React, Next.js, and Webpack, which are commonly used in both legitimate and phishing sites but may indicate a modern, dynamically generated phishing kit. The SSL certificate is issued by Let's Encrypt (R12), a valid but frequently abused certificate authority for malicious domains. Defenders should note that the exact content and target of this phishing site remain unconfirmed beyond the 'LENA' page title.

The domain's age (over 11 years) is unusual for phishing infrastructure, which typically cycles quickly; however, this does not reduce its current risk. Immediate action is recommended: block the domain and its resolving IP at the perimeter, monitor for connections from internal assets, and investigate any prior interactions. If 'LENA' corresponds to a known internal or third-party service, notify affected users and reset credentials accessed via this domain. No additional brand or scam category details are available from the provided intelligence.