b2c2-amm[.]vip

The domain b2c2-amm.vip has been identified as a brand impersonation threat, targeting individuals in the investment sector. This site poses significant risks associated with investment scams, leveraging deceptive branding to lure victims into fraudulent activities. The relevant threat type is indicative of schemes designed to exploit unsuspecting users under the guise of legitimate investment opportunities, particularly in the realms of forex and cryptocurrencies.

Technical analysis reveals a VirusTotal detection score of 1/95, meaning that only one out of ninety-five security vendors flagged this domain, suggesting limited recognition within existing security infrastructures. The domain was registered through Gname.com Pte. Ltd., and it resolves to the IP address 104.21.6.245. Interestingly, the domain was created on February 24, 2026, and features a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. Additionally, the domain has appeared on three security blocklists and is actively blocked by multiple security solutions, including MetaMask and PhishDestroy.

Currently, the domain b2c2-amm.vip stands offline, but this action does not completely mitigate risk, as the assets and infrastructure used in its operation may resurface in a modified form. The presence of HSTS, Cloudflare, and HTTP/3 suggests advanced techniques were employed to bolster the site's legitimacy and resilience against detection. Given these factors, users should exercise caution and remain vigilant against any similar future threats as this domain's infrastructure could be redeployed with minimal modification.