fiscaltrade[.]com

This domain, fiscaltrade.com, is actively engaged in brand impersonation targeting individuals seeking cryptocurrency investment opportunities. The site presents itself as a legitimate cryptocurrency trading and investment platform, using the page title 'Cryptocurrency - Cryptocurrency trading and invest platform.' Victims are likely lured into depositing funds or sharing sensitive financial information under false pretenses, with the intent of financial theft or unauthorized access to digital wallets. Analysis indicates fiscaltrade.com was registered on August 25, 2019, through Dynadot LLC, a domain registrar commonly used for both legitimate and malicious registrations. As of the latest assessment, only 2 out of 95 security vendors on VirusTotal flag this domain as malicious, suggesting limited detection at present. The domain resolves to the IP address 188.114.96.3 and employs infrastructure protected by Cloudflare, including HTTP/3 and HSTS, which may complicate takedown efforts and enhance perceived legitimacy. The SSL certificate is issued by Let's Encrypt, a common but not inherently malicious provider. The domain appears on one security blocklist, specifically PhishDestroy, reinforcing its classification as a threat. If a user has visited fiscaltrade.com or interacted with its content, immediate action is required. Cease all communication with the site and do not provide any personal, financial, or login credentials. If cryptocurrency was transferred, document all transaction hashes and wallet addresses involved, then report the incident to relevant financial authorities and blockchain analysis platforms. Reset passwords for any accounts accessed on the same device, enable multi-factor authentication, and scan the system for malware using updated security tools. Monitor financial statements and digital asset wallets for unauthorized activity. Report the domain to abuse channels at Dynadot LLC and Cloudflare to support mitigation efforts.