aml-guard[.]pro

On July 22, 2026, the domain aml-guard.pro was identified as a brand impersonation threat targeting the brand 'across'. This domain is associated with an investment scam and has been flagged by one security blocklist, specifically PhishDestroy. The domain was created on February 21, 2026, and is currently offline. Infrastructure analysis reveals that the domain resolved to the IP address 2.59.163.70, which is located in Poland and is part of the Autonomous System AS215540, operated by GLOBAL CONNECTIVITY SOLUTIONS LLP.

The SSL certificate for this domain is identified as R13. The page title associated with this domain is 'Report Wallet | AML Check'. Analysis indicates that the domain has been flagged by one out of 93 security vendors on VirusTotal, suggesting a potential risk. Given the elevated risk level, defenders are advised to block this domain and monitor for any related malicious activities.

The exact content of the site has not been thoroughly analyzed, but the page title and the known scam type suggest that it may have been used to deceive users into providing sensitive information related to investments or financial transactions. Defenders should also ensure that users within their network are aware of the risks associated with visiting or interacting with this domain and similar threats. Regular updates to security blocklists and phishing detection tools are recommended to mitigate the impact of such threats.