The inclusion of "SVB" is a major red flag. Following the collapse of Silicon Valley Bank in March 2023, there has been a surge in "banking recovery" and "vendor payment" scams. A hybrid scam merging Carrefour (a retailer) with SVB (a bank) might try to trick business account holders.
To understand why carrefour.fr.svb is dangerous, you must understand how Domain Name System (DNS) hierarchy works. carrefour.fr.svb
– .svb is not a common TLD; it may be an internal company label (e.g., for S ilicon V alley B ank, though SVB is now part of First Citizens BancShares). Carrefour might have used this for a specific banking/finance integration. The inclusion of "SVB" is a major red flag