# mijn.belastingdienst.nl.kwfmdidfywbnpcxvksj2fnn1vk25m1ru2nfzengjdq3cberblubo.ahamshopbd.com — MALICIOUS

> Beware of mijn.belastingdienst.nl.kwfmdidfywbnpcxvksj2fnn1vk25m1ru2nfzengjdq3cberblubo.ahamshopbd.com phishing scam. Stay safe and avoid sharing personal info.

## Summary
PhishDestroy identifies mijn.belastingdienst.nl.kwfmdidfywbnpcxvksj2fnn1vk25m1ru2nfzengjdq3cberblubo.ahamshopbd.com as a high-risk phishing domain designed to deceive users by mimicking trusted tax service websites. Such sites can trick visitors into revealing sensitive information, like login credentials or financial data, which can lead to identity theft or financial loss.

This phishing attempt works by creating a domain name that closely resembles a legitimate government tax site, misleading users into trusting it. The site may prompt for confidential details under false pretenses. Although currently offline, this domain was flagged by multiple security vendors and appeared on blocklists, indicating it was actively used for malicious purposes.

If you have visited this site, it is crucial to avoid entering any personal information and to scan your devices for malware. Change any passwords that may have been compromised and monitor your financial accounts for suspicious activity. Reporting the incident to your local cybersecurity authority can also help protect others from falling victim to similar scams.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: Account Suspended

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cosmotown, Inc.
- Country: US
- IP: 49.12.134.146
- IP Country: DE
- IP City: Falkenstein
- IP Org: AS24940 Hetzner Online GmbH
- Nameservers: ["draco.balancedserver.com", "luna.balancedserver.com"]
- SSL Issuer: Let's Encrypt / R12

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Netcraft", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bd599-0ff8-75bf-92f4-a75e1d7837be.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/121ac610-6017-4829-8a8d-71a780812643
- PhishDestroy: https://phishdestroy.io/domain/mijn.belastingdienst.nl.kwfmdidfywbnpcxvksj2fnn1vk25m1ru2nfzengjdq3cberblubo.ahamshopbd.com/
- LLM endpoint: https://phishdestroy.io/domain/mijn.belastingdienst.nl.kwfmdidfywbnpcxvksj2fnn1vk25m1ru2nfzengjdq3cberblubo.ahamshopbd.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mijn.belastingdienst.nl.kwfmdidfywbnpcxvksj2fnn1vk25m1ru2nfzengjdq3cberblubo.ahamshopbd.com/
Last updated: 2026-03-19