amlpolicyb2b[.]xyz

The domain amlpolicyb2b.xyz was registered on August 13 2025 through NameCheap, Inc. It uses the registrar‑provided nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. The zone resolves to the IPv4 address 216.24.57.7, which belongs to AS397273 (Render) hosted in the United States.

Network analysis shows the host is fronted by Cloudflare, delivering HTTP/3 traffic and presenting a Google Trust Services / WE1 SSL certificate. An HTTP 301 redirect is observed, indicating the site forwards visitors to another location while preserving the original hostname. The site loads external services such as Google Sign‑in, Tailwind CSS, Stripe, Google Tag Manager and Google Analytics, all typical of credential‑harvesting or payment‑driven scams.

The landing page reports the title “ComplianceKit”, and the known scam type is cryptocurrency. Reputation services assign a Scamadviser trust score of 16 / 100 and a Gridinsoft score of 0 / 100, reflecting a high likelihood of malicious intent. VirusTotal records seven detections out of ninety‑five scanned vendors, and the domain appears on at least one public blocklist. PhishDestroy currently lists the site as blocked, confirming active mitigation by threat‑intelligence feeds.

Given the combination of recent registration, low reputation scores, active blocklist entries, and the presence of credential‑related and payment‑gateway integrations, defenders should treat amlpolicyb2b.xyz as a high‑risk malicious resource. Recommended actions include adding the domain and its resolving IP to deny‑list rules, monitoring DNS queries for the associated nameservers, and employing URL filtering to prevent end‑user access. Continuous re‑evaluation is advised, as the site may evolve its hosting or payload delivery mechanisms.