france-cryptodeclaration[.]me
“Comment déclarer les plus ou moins values sur cessions d'actifs numériques (cryptomonnaies ..) ? | …”
Resumen de las pruebas
The domain france-cryptodeclaration.me was registered on 23 February 2026 through Register SPA and is currently taken offline, returning HTTP 404 for any request. DNS resolution points to the IPv4 address 87.106.242.99, which is hosted in Germany under AS8560 operated by IONOS SE. The authoritative nameservers are ns1.amenworld.com and ns2.amenworld.com, both of which are typical of low‑cost hosting services. No TLS certificate is presented, and the site does not respond over HTTPS, indicating an absence of encryption.
The page title retrieved from the server references the official French tax portal “impots.gouv.fr” and specifically mentions “Comment déclarer les plus ou moins values sur cessions d'actifs numériques (cryptomonnaies ..) ?”, suggesting an attempt to lure users seeking guidance on cryptocurrency tax reporting. Two of ninety‑three VirusTotal scanners flagged the domain, and the domain appears on four external blocklists. It is also listed by PhishDestroy, MetaMask, ScamSniffer, and SEAL as a malicious resource, reinforcing the classification as a phishing vector targeting individuals interested in crypto‑related tax compliance. The limited evidence does not reveal the exact payload or credential‑harvesting mechanism, and the offline status prevents direct observation of the malicious page content.
However, the combination of a deceptive page title, lack of HTTPS, recent registration, and multiple independent blocklist detections provides a strong indicator of a targeted phishing campaign. Defenders should block DNS resolution for france-cryptodeclaration.me at the network perimeter, add the associated IP address 87.106.242.99 to firewall deny lists, and monitor for any outbound connections to the Amenworld nameservers. Email security gateways should flag messages containing URLs or references to this domain, especially those purporting to originate from the French tax authority.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260223-1B755D- Título de la página capturada
- Comment déclarer les plus ou moins values sur cessions d'actifs numériques (cryptomonnaies ..) ? | impots.gouv.fr
- Artefacto PDF
- Evidencia en PDF
Fundamento jurídico
Texto completo de la evidencia
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | france-cryptodeclaration.me |
malicious | Sinkholed |
| DigiCert UltraDNS | france-cryptodeclaration.me |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | france-cryptodeclaration.me |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
7 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
-
Estado del dominio
Inaccesible → Accesible
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.