[{"data":1,"prerenderedAt":891},["ShallowReactive",2],{"\u002Fblog\u002Fla-poste-obstacle-lutte-contre-phishing\u002F":3,"related-\u002Fblog\u002Fla-poste-obstacle-lutte-contre-phishing":866},{"id":4,"title":5,"author":6,"body":7,"category":850,"date":851,"description":852,"draft":853,"extension":854,"faqs":855,"image":856,"meta":859,"navigation":860,"path":861,"seo":862,"seoTitle":863,"showOnBlog":860,"stem":864,"updatedAt":855,"__hash__":865},"blog\u002Fblog\u002Fla-poste-obstacle-lutte-contre-phishing.md","La Poste, obstacle majeur dans la lutte contre le phishing","Valentin Bourgeois",{"type":8,"value":9,"toc":839},"minimark",[10,15,31,35,47,58,743,750,754,760,767,772,776,783,787,794,798,805,809,812,834,837],[11,12,14],"h2",{"id":13},"introduction","Introduction",[16,17,18,25,26,30],"p",{},[19,20,24],"a",{"href":21,"rel":22},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fvalentin-bourgeois-7262a991_cybersaezcuritaez-laposte-cyberdaezfense-activity-7189023141044617216-WkpC?utm_source=share&utm_medium=member_desktop",[23],"nofollow","On en parlait sur LinkedIn",", en tant que fournisseur de services de cybersécurité pour les PME, nous luttons au quotidien contre la menace du phishing, cette technique malveillante visant à dérober les identifiants et informations sensibles de nos clients. Malheureusement, un acteur inattendu vient régulièrement compliquer notre tâche : ",[27,28,29],"strong",{},"La Poste",".",[11,32,34],{"id":33},"un-catalogue-impressionnant-de-noms-de-domaine","Un catalogue impressionnant de noms de domaine",[16,36,37,38,41,42,46],{},"Nos recherches ont mis en évidence un fait troublant : ",[27,39,40],{},"La Poste possède un impressionnant catalogue de noms de domaine",", couvrant de multiples extensions (.com, .net, .info, .org, etc.). Ce tableau recense plus de 200 noms de domaine directement liés à ",[19,43,29],{"href":44,"rel":45},"https:\u002F\u002Flaposte.fr",[23]," ou à ses différentes entités (La Banque Postale, Colissimo, etc.).",[16,48,49],{},[27,50,51,52,57],{},"Voici le tableau récapitulatif des noms de domaine enregistrés par La Poste (Merci à ",[19,53,56],{"href":54,"rel":55},"https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Fnicolaspawlak\u002F",[23],"Nicolas Pawlak","):",[59,60,61,83],"table",{},[62,63,64],"thead",{},[65,66,67,71,74,77,80],"tr",{},[68,69,70],"th",{},".com (1)",[68,72,73],{},".com (2)",[68,75,76],{},".net",[68,78,79],{},".info",[68,81,82],{},".org",[84,85,86,104,121,138,155,172,189,206,223,240,257,274,291,308,325,341,357,373,389,405,421,437,453,469,485,501,517,532,547,562,577,592,607,622,637,651,665,678,691,704,717,730],"tbody",{},[65,87,88,92,95,98,101],{},[89,90,91],"td",{},"alaposte.com",[89,93,94],{},"lapostefinance.com",[89,96,97],{},"c-suivi.net",[89,99,100],{},"adesio.info",[89,102,103],{},"colis.org",[65,105,106,109,112,115,118],{},[89,107,108],{},"ardoiz.com",[89,110,111],{},"lapostefrancaise.com",[89,113,114],{},"carrementfoot.net",[89,116,117],{},"alaposte.info",[89,119,120],{},"courrier-suivi.org",[65,122,123,126,129,132,135],{},[89,124,125],{},"asset-management-lab.com",[89,127,128],{},"lapostefrance.com",[89,130,131],{},"certipost.net",[89,133,134],{},"alliatys.info",[89,136,137],{},"edipost.org",[65,139,140,143,146,149,152],{},[89,141,142],{},"assetmanagement-lab.com",[89,144,145],{},"lapostegroupe.com",[89,147,148],{},"certiposte.net",[89,150,151],{},"annuairedelaposte.info",[89,153,154],{},"ediposte.org",[65,156,157,160,163,166,169],{},[89,158,159],{},"assetmanagementlab.com",[89,161,162],{},"lapostepro.com",[89,164,165],{},"coliposte.net",[89,167,168],{},"certinomis.info",[89,170,171],{},"esipost.org",[65,173,174,177,180,183,186],{},[89,175,176],{},"bagoo.com",[89,178,179],{},"lecourriersuivi.com",[89,181,182],{},"courrier-suivi.net",[89,184,185],{},"Ibpas.info",[89,187,188],{},"fondationlaposte.org",[65,190,191,194,197,200,203],{},[89,192,193],{},"carrementfoot.com",[89,195,196],{},"lettre-suivie.com",[89,198,199],{},"courriersuivi.net",[89,201,202],{},"la-poste.info",[89,204,205],{},"illiclic.org",[65,207,208,211,214,217,220],{},[89,209,210],{},"certiposte.com",[89,212,213],{},"lettresuivie.com",[89,215,216],{},"csuivi.net",[89,218,219],{},"labanquepostale.info",[89,221,222],{},"Ibpas.org",[65,224,225,228,231,234,237],{},[89,226,227],{},"colis-logistique.com",[89,229,230],{},"monbureaudeposte.com",[89,232,233],{},"cyberposte.net",[89,235,236],{},"laposte.info",[89,238,239],{},"la-poste.org",[65,241,242,245,248,251,254],{},[89,243,244],{},"courrier-suivi.com",[89,246,247],{},"optimisinternational.com",[89,249,250],{},"e-laposte.net",[89,252,253],{},"lapostefinance.info",[89,255,256],{},"labanquepostale.org",[65,258,259,262,265,268,271],{},[89,260,261],{},"courriersuivi.com",[89,263,264],{},"post-address.com",[89,266,267],{},"easyposte.net",[89,269,270],{},"maileva.info",[89,272,273],{},"laposte.org",[65,275,276,279,282,285,288],{},[89,277,278],{},"csuivi.com",[89,280,281],{},"poste-adresse.com",[89,283,284],{},"edipost.net",[89,286,287],{},"mediapost.info",[89,289,290],{},"lapostefrancaise.org",[65,292,293,296,299,302,305],{},[89,294,295],{},"cyberposte.com",[89,297,298],{},"poste-adresses.com",[89,300,301],{},"ediposte.net",[89,303,304],{},"mkg-laposte.info",[89,306,307],{},"spl-labanquepostale.org",[65,309,310,313,316,319,322],{},[89,311,312],{},"destineolink.com",[89,314,315],{},"posteadresse.com",[89,317,318],{},"esipost.net",[89,320,321],{},"notif-build-laposte.info",[89,323,324],{},"stampigo.org",[65,326,327,330,333,336,339],{},[89,328,329],{},"digiposte.com",[89,331,332],{},"posteadresses.com",[89,334,335],{},"esiposte.net",[89,337,338],{},"notif-colissimo-laposte.info",[89,340],{},[65,342,343,346,349,352,355],{},[89,344,345],{},"docapost.com",[89,347,348],{},"postehabitat.com",[89,350,351],{},"florilettres.net",[89,353,354],{},"notif-laposte.info",[89,356],{},[65,358,359,362,365,368,371],{},[89,360,361],{},"docatpost.com",[89,363,364],{},"posteweb.com",[89,366,367],{},"france-poste.net",[89,369,370],{},"notif-lidentitenumerique-laposte.info",[89,372],{},[65,374,375,378,381,384,387],{},[89,376,377],{},"e-laposte.com",[89,379,380],{},"postie-bi.com",[89,382,383],{},"groupelaposte.net",[89,385,386],{},"notif-lpfr-laposte.info",[89,388],{},[65,390,391,394,397,400,403],{},[89,392,393],{},"elaposte.com",[89,395,396],{},"postie-web.com",[89,398,399],{},"groupelbpam.net",[89,401,402],{},"notif-moncompte-laposte.info",[89,404],{},[65,406,407,410,413,416,419],{},[89,408,409],{},"edi-poste.com",[89,411,412],{},"presse-postel.com",[89,414,415],{},"hexaposte.net",[89,417,418],{},"poste-avenir.info",[89,420],{},[65,422,423,426,429,432,435],{},[89,424,425],{},"ediposte.com",[89,427,428],{},"pret-a-suivre.com",[89,430,431],{},"illiclic.net",[89,433,434],{},"posteavenir.info",[89,436],{},[65,438,439,442,445,448,451],{},[89,440,441],{},"easyposte.com",[89,443,444],{},"pretarecommander.com",[89,446,447],{},"immosphere.net",[89,449,450],{},"postentreprise.info",[89,452],{},[65,454,455,458,461,464,467],{},[89,456,457],{},"esiposte.com",[89,459,460],{},"pretasuivre.com",[89,462,463],{},"iot-net.net",[89,465,466],{},"realys.info",[89,468],{},[65,470,471,474,477,480,483],{},[89,472,473],{},"florilettre.com",[89,475,476],{},"spl-labanquepostale.com",[89,478,479],{},"la-poste.net",[89,481,482],{},"spl-labanquepostale.info",[89,484],{},[65,486,487,490,493,496,499],{},[89,488,489],{},"france-poste.com",[89,491,492],{},"startinpost.com",[89,494,495],{},"labanquepostale-assurances-iard.net",[89,497,498],{},"tropheesdelaventeadistance.info",[89,500],{},[65,502,503,506,509,512,515],{},[89,504,505],{},"groupelaposte.com",[89,507,508],{},"stampigo.com",[89,510,511],{},"labanquepostale.net",[89,513,514],{},"vehiposte.info",[89,516],{},[65,518,519,522,525,528,530],{},[89,520,521],{},"groupelbpam.com",[89,523,524],{},"Suivezmoi.com",[89,526,527],{},"lecourriersuivi.net",[89,529],{},[89,531],{},[65,533,534,537,540,543,545],{},[89,535,536],{},"hexaposte.com",[89,538,539],{},"tempost.com",[89,541,542],{},"letraindelabanquepostale.net",[89,544],{},[89,546],{},[65,548,549,552,555,558,560],{},[89,550,551],{},"hexavia.com",[89,553,554],{},"temposte.com",[89,556,557],{},"lettre-suivie.net",[89,559],{},[89,561],{},[65,563,564,567,570,573,575],{},[89,565,566],{},"Ibpam.com",[89,568,569],{},"tropheesdumediacourrier.com",[89,571,572],{},"lettresuivie.net",[89,574],{},[89,576],{},[65,578,579,582,585,588,590],{},[89,580,581],{},"labanquepostale-assurances-iard.com",[89,583,584],{},"vehiposte.com",[89,586,587],{},"laposte.net",[89,589],{},[89,591],{},[65,593,594,597,600,603,605],{},[89,595,596],{},"labanquepostale.com",[89,598,599],{},"veiller-sur-mes-parents.com",[89,601,602],{},"lapostefinance.net",[89,604],{},[89,606],{},[65,608,609,612,615,618,620],{},[89,610,611],{},"la-poste.com",[89,613,614],{},"veillersurmesparents.com",[89,616,617],{},"lapostefrancaise.net",[89,619],{},[89,621],{},[65,623,624,627,630,633,635],{},[89,625,626],{},"lamaisondestalents.com",[89,628,629],{},"viaposte.com",[89,631,632],{},"lapostepro.net",[89,634],{},[89,636],{},[65,638,639,641,644,647,649],{},[89,640],{},[89,642,643],{},"vigik.com",[89,645,646],{},"posteweb.net",[89,648],{},[89,650],{},[65,652,653,655,658,661,663],{},[89,654],{},[89,656,657],{},"webposte.com",[89,659,660],{},"pret-a-suivre.net",[89,662],{},[89,664],{},[65,666,667,669,671,674,676],{},[89,668],{},[89,670],{},[89,672,673],{},"pretasuivre.net",[89,675],{},[89,677],{},[65,679,680,682,684,687,689],{},[89,681],{},[89,683],{},[89,685,686],{},"regliss.net",[89,688],{},[89,690],{},[65,692,693,695,697,700,702],{},[89,694],{},[89,696],{},[89,698,699],{},"spl-labanquepostale.net",[89,701],{},[89,703],{},[65,705,706,708,710,713,715],{},[89,707],{},[89,709],{},[89,711,712],{},"stampigol.net",[89,714],{},[89,716],{},[65,718,719,721,723,726,728],{},[89,720],{},[89,722],{},[89,724,725],{},"suivez-moi.net",[89,727],{},[89,729],{},[65,731,732,734,736,739,741],{},[89,733],{},[89,735],{},[89,737,738],{},"webposte.net",[89,740],{},[89,742],{},[16,744,745,746,749],{},"Cette ",[27,747,748],{},"profusion de noms de domaine"," représente un véritable défi pour nous, professionnels de la cybersécurité. En effet, lorsque nous alertons nos clients sur des tentatives de phishing, nous devons sans cesse vérifier si le domaine utilisé par les pirates ne fait pas partie de ceux enregistrés par La Poste elle-même. Cela crée une complexité supplémentaire et ralentit notre processus de détection et de mise en garde.",[11,751,753],{"id":752},"une-complication-majeure-pour-la-sensibilisation","Une complication majeure pour la sensibilisation",[16,755,756,759],{},[27,757,758],{},"Cette prolifération de domaines génère une multitude de canaux par lesquels les clients peuvent recevoir des communications, rendant ainsi le travail de sensibilisation à la sécurité plus ardu."," Toute l'année, nos équipes éduquent les utilisateurs sur les dangers des noms de domaine usurpés, mais lorsque La Poste multiplie les variantes de domaines, nos efforts sont contrecarrés, ajoutant des complications inutiles et potentiellement coûteuses pour nos clients.",[16,761,762,763,766],{},"Pourquoi cette pratique est-elle problématique ? ",[27,764,765],{},"Chaque nouveau nom de domaine représente une nouvelle opportunité pour les acteurs malveillants de créer des copies ou de simuler des communications officielles de La Poste."," Ceci est particulièrement troublant lorsqu'on considère que même les utilisateurs les plus avertis peuvent avoir du mal à distinguer un email légitime d'un email de phishing quand le domaine utilisé semble plausible.",[768,769],"article-button",{"link":770,"title":771},"\u002Faudit-gratuit\u002F","Prenez RDV avec nos experts en cybersécurité",[11,773,775],{"id":774},"des-solutions-dns-et-antispam-fragilisées","Des solutions DNS et antispam fragilisées",[16,777,778,779,782],{},"Cette situation ",[27,780,781],{},"complexifie également la mise en place de solutions de protection DNS et antispam"," au sein des PME. Nos équipes doivent constamment affiner leurs paramètres pour éviter de bloquer des domaines légitimes de La Poste, tout en restant vigilants face aux tentatives de phishing.",[11,784,786],{"id":785},"une-mise-en-danger-des-clients","Une mise en danger des clients",[16,788,789,790,793],{},"In fine, c'est la ",[27,791,792],{},"sécurité même de nos clients qui est fragilisée",". Avec ce foisonnement de noms de domaine liés à La Poste, les utilisateurs finaux peinent à faire la différence entre un site officiel et une tentative de phishing. Cela les expose à des risques accrus de perdre leurs identifiants ou de subir des dommages financiers.",[11,795,797],{"id":796},"nous-appelons-la-poste-à-la-responsabilité","Nous appelons La Poste à la responsabilité",[16,799,800,801,804],{},"En tant que fournisseur de services postaux et bancaires, ",[27,802,803],{},"La Poste a une responsabilité morale envers ses clients et les entreprises qui gravitent autour d'elle",". Nous l'exhortons à revoir sa politique d'enregistrement de noms de domaine, afin de simplifier la lutte contre le phishing et de mieux protéger l'ensemble de son écosystème.",[11,806,808],{"id":807},"des-solutions-existent","Des solutions existent",[16,810,811],{},"Pour pallier cette problématique, nous proposons trois pistes d'amélioration sur notre site web :",[813,814,815,822,828],"ul",{},[816,817,818],"li",{},[19,819,821],{"href":820},"\u002Fcampagne-phishing\u002F","Campagne de phishing",[816,823,824],{},[19,825,827],{"href":826},"\u002Fantispam\u002F","Antispam",[816,829,830],{},[19,831,833],{"href":832},"\u002Fprotection-dns\u002F","Protection DNS",[16,835,836],{},"Ensemble, construisons une cybersécurité plus solide et pérenne pour les PME françaises.",[768,838],{"link":770,"title":771},{"title":840,"searchDepth":841,"depth":841,"links":842},"",2,[843,844,845,846,847,848,849],{"id":13,"depth":841,"text":14},{"id":33,"depth":841,"text":34},{"id":752,"depth":841,"text":753},{"id":774,"depth":841,"text":775},{"id":785,"depth":841,"text":786},{"id":796,"depth":841,"text":797},{"id":807,"depth":841,"text":808},"Cybersécurité","2024-04-29","Comment les nombreux noms de domaine enregistrés par La Poste compliquent la vie des PME dans la lutte contre le phishing.",false,"md",null,{"src":857,"alt":858},"\u002Fblog\u002Fla-poste-obstacle-lutte-contre-phishing.webp","La Poste Email Domaines Phishing PME",{},true,"\u002Fblog\u002Fla-poste-obstacle-lutte-contre-phishing",{"title":5,"description":852},"La Poste, un obstacle dans la lutte contre le phishing des PME","blog\u002Fla-poste-obstacle-lutte-contre-phishing","s4e6bo4ZRaG26PbK7SOFA0LjKWlU_ivzrwZd6S7F2qw",[867,875,883],{"path":868,"title":869,"description":870,"image":871,"date":874,"category":850},"\u002Fblog\u002Fpatch-tuesday-aout-2026-microsoft","Patch Tuesday août 2026 : 398 failles et un zero-day Windows exploité par la Corée du Nord","Patch Tuesday août 2026 : Microsoft corrige environ 398 vulnérabilités dont un zero-day Windows déjà utilisé pour installer un rootkit. Ce qu'une PME doit traiter en priorité.",{"src":872,"alt":873},"\u002Fblog\u002Fpatch-tuesday-aout-2026-microsoft.webp","Patch Tuesday Microsoft août 2026, correctifs de sécurité pour PME","2026-08-11",{"path":876,"title":877,"description":878,"image":879,"date":882,"category":850},"\u002Fblog\u002Fcertification-iso-27001-retour-experience","Certification ISO 27001 : ce que trois démarches clients et la nôtre nous ont appris","Ce qui bloque une certification ISO 27001 n'est presque jamais technique. Retour d'expérience sur des démarches clients et sur la nôtre.",{"src":880,"alt":881},"\u002Fblog\u002Fcertification-iso-27001-retour-experience.webp","Deux professionnels examinent un tableau de bord de conformité ISO 27001 affichant des contrôles et leurs horodatages sur l'écran d'une salle de réunion","2026-08-07",{"path":884,"title":885,"description":886,"image":887,"date":890,"category":850},"\u002Fblog\u002Fpatch-tuesday-juillet-2026-microsoft","Patch Tuesday juillet 2026 : 570 failles, 3 zero-days exploités dont une RCE SharePoint à 9.8","Patch Tuesday juillet 2026 : Microsoft corrige environ 570 vulnérabilités et 3 failles déjà exploitées, dont une RCE SharePoint notée 9.8. Ce qu'une PME doit traiter en priorité.",{"src":888,"alt":889},"\u002Fblog\u002Fpatch-tuesday-juillet-2026-microsoft.webp","Patch Tuesday Microsoft juillet 2026, correctifs de sécurité pour PME","2026-07-14",1791790473801]