Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
francoreafin[.]net
“FrançoréaFin - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”
Zusammenfassung der Beweislage
The domain francoreafin.net was flagged on July 25, 2026 as a brand‑impersonation site targeting the financial brand argent. The domain was created on 21 February 2026 and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. No SSL certificate is present, indicating the site operated over plain HTTP. Infrastructure analysis shows the domain resolves to IP address 104.21.70.212, which is part of the Cloudflare network (AS13335) located in the United States. The authoritative nameservers are melissa.ns.cloudflare.com and sterling.ns.cloudflare.com, confirming the use of Cloudflare’s DNS services.
Detection data indicate the site appears on a single security blocklist and has been blocked by PhishDestroy. The Gridinsoft trust score is 0 / 100, reflecting a low reputation. VirusTotal scanned the domain and recorded one positive detection out of 95 security vendors, reinforcing the malicious assessment. The page title retrieved from the site, "FrançoréaFin - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis," suggests an unauthorized attempt to present a trading platform that references the year 2025 and a large number of reviews, a typical lure for investment‑related scams.
Current status shows the domain taken offline, but historical evidence confirms it was active and serving malicious content before removal. No additional intelligence such as phishing kit signatures, credential‑harvesting forms, or observed victim reports is available, leaving the exact content of the page unverified. Defenders should add francoreafin.net to network and email blocklists, enforce HTTPS‑only policies to prevent HTTP connections to the domain, and monitor the Cloudflare IP range and the registrar for newly registered domains that mimic the same naming pattern. Continuous threat‑intel feed updates are recommended to capture any re‑registration attempts or related infrastructure reuse.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260107-C11AD0- Titel der erfassten Seite
- FrançoréaFin - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis
- PDF-Artefakt
- PDF-Beweis
Vollständiger Beweistext
Acceptable Use Policy (AUP): The domain francoreafin.net is being used for phishing activities, which is a clear violation of your AUP prohibiting illegal activities and fraud.
Terms of Service (TOS): The use of this domain for deceptive practices constitutes a violation of your TOS, which reserves the right to suspend or terminate services for such infractions.
Applicable Laws (PL):
Act of 18 July 2002 on the Provision of Services by Electronic Means: This law prohibits the provision of services that facilitate illegal activities, including phishing.
Criminal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny): Articles 286 and 287 address fraud and computer-related offenses, including phishing schemes.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny under Polish law. Prompt compliance is essential to mitigate potential risks.
Data Coverage
Erkenntnisse zur Netzwerksicherheit
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | francoreafin.net |
malicious | Sinkholed |
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 12.08.2026
Erkennungszeitleiste
-
Cloudflare Radar
Cloudflare-Radar-Scan gespeichert · Scan öffnen
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, TLS-Namen und Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal-Analyse
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt