aml-dotaznik[.]cz

Analysis of aml-dotaznik.cz shows a newly registered domain (created 21 Feb 2026) that is actively serving content over HTTPS with a Let’s Encrypt R13 certificate. The site resolves to IP 62.109.150.131, hosted in the Czech Republic under AS29134 Webglobe, s.r.o., and is served by Nginx. Front‑end libraries detected include Bootstrap, Vue.js, jQuery, Popper, Modernizr, OWL Carousel and the page returns HTTP 200. The page title "Hlavní stránka - AML Dotazník" is present, but the content has not been examined beyond the title. The domain appears on one security blocklist and is blocked by PhishDestroy; Gridinsoft assigns a trust score of 0 / 100. MX records list two hosts (priority 10) pointing to email3.webglobe.cz, indicating a functional mail subsystem. VirusTotal reports a single vendor flag out of 95, reinforcing the suspicion of malicious activity. The listed scam type is "Crypto Scam" and the threat level is rated high, with the domain marked as active. Defenders should treat aml‑dotaznik.cz as hostile infrastructure: block DNS resolution and HTTP/S traffic, monitor for related C2 communications, and consider sinkholing the IP address. Further investigation of the site’s payload and any credential‑phishing forms is required to confirm the exact phishing vector.