amlraporte[.]com

The domain amlraporte.com was registered on February 21 2026 via GoDaddy.com, LLC. It resolves to the IPv4 address 77.105.139.98, which is assigned to the Netherlands under ASN 216071 (SERVERS TECH FZCO). The authoritative nameservers are ns07.domaincontrol.com and ns08.domaincontrol.com, both typical of GoDaddy's DNS service.

Network‑level probing shows the site returns HTTP 200 responses and presents a valid Let’s Encrypt certificate (R11) for the host name. Reputation services assign a Gridinsoft trust score of 0 out of 100, and VirusTotal records a single positive detection out of 95 scanned engines. The domain appears on one external security blocklist and is actively blocked by PhishDestroy.

The page title advertised at the root URL is “AML Check – The full‑fledged crypto compliance solution”, indicating a cryptocurrency‑focused narrative. Threat intelligence flags the domain as a brand‑impersonation campaign targeting AMLBot, suggesting that the attacker seeks to lure victims by masquerading as a compliance service. No additional content has been captured, so the exact login flow or data‑capture mechanisms remain unverified.

Defenders should add amlraporte.com to URL filtering and email gateway block lists, and monitor DNS queries for the associated IP address and GoDaddy nameservers for any surge in resolution attempts. Because the SSL certificate is publicly trusted, endpoint controls that rely on certificate validation alone may not block access; supplemental heuristic or reputation checks are advised. Continuous observation of VirusTotal and other threat‑intel feeds is recommended to detect any escalation in detection counts or new payload associations.