portail-antai-amendes[.]info

Analysis of portail-antai-amendes.info indicates a phishing site targeting users of the French government's official fine payment portal. The domain, registered on February 21, 2026, resolves to IP address 92.119.159.22, hosted on AS44812 (IP SERVER LLC) in Russia. The page title, 'Site officiel unique de télépaiement | Amendes.gouv.fr,' explicitly mimics the legitimate French government fine payment service, suggesting an intent to deceive users into submitting sensitive payment or personal information.

Infrastructure analysis reveals the domain is currently offline, though it was previously flagged by 17 of 95 security vendors on VirusTotal and appears on the PhishDestroy blocklist. It is also listed in one AlienVault OTX threat intelligence pulse, reinforcing its classification as malicious. The SSL certificate (R13) provides no additional trust signals, and the domain's Gridinsoft trust score of 0/100 further confirms its high-risk status.

While the exact content and functionality of the site remain unconfirmed due to its offline status, the combination of its page title, hosting location, and detection by multiple security vendors strongly supports its classification as a phishing domain. Defenders should treat this domain as compromised and continue monitoring for reactivation or related infrastructure. Organizations should block access to the domain and IP, and consider alerting users to the potential threat, particularly those who may have interacted with the site prior to its takedown.