amspresale[.]cz

Analysis indicates the domain amspresale.cz is actively involved in generic_phishing activity, currently assessed as high risk and in active state. The page presents itself under a generic presale-related naming pattern, potentially used to attract users seeking ticket or early-access purchases.

Infrastructure and telemetry data show multiple malicious indicators. The domain is listed on 2 security blocklists and has been flagged by 7 of 95 VirusTotal security vendors. The host resolves to IP 185.121.120.28, geolocated in the US under AS262287 (Latitude.sh LTDA). No SSL certificate is present, increasing interception and impersonation risk. External monitoring confirms active blocking by PhishDestroy and ScamSniffer.

At present, the domain remains active, increasing exposure risk for credential harvesting or payment redirection attempts. The absence of transport encryption combined with moderate multi-vendor detection suggests an operational phishing infrastructure rather than a passive or parked domain. Users and automated systems should treat all content served from this host as untrusted. Recommended actions include immediate blocking at DNS and proxy layers, preventing outbound connections to the IP, and monitoring for related domains sharing similar naming patterns or infrastructure. Any user interaction should be considered compromised, and credential reset procedures should be initiated if exposure occurred.