amlriskscore[.]ru

This domain amlriskscore.ru was registered on March 03 2026 through the REGRU-RU registrar and resolves to IP address 37.140.192.63. The domain holds an active status as of July 12 2026 under a high risk classification associated with generic phishing. Hosting infrastructure consists of an SSL certificate from Let's Encrypt together with Nginx server software. The recorded page title references AML Risk Score as an AI-powered compliance offering for banks. Analysis indicates continued operation without interruption since initial registration.

Detection records show VirusTotal returning 3 detections from 95 vendors while Gridinsoft lists a trust score of 0 out of 100. The domain is present on 2 security blocklists and blocked by PhishDestroy in addition to BLP-Malware. AlienVault OTX has incorporated the domain into 23 separate threat intelligence pulses. These metrics collectively demonstrate recognition across multiple independent monitoring systems without reliance on any single source.

What remains uncertain includes the exact campaign duration beyond the documented creation date and the full scope of any targeted entities since only the page title and registration metadata are available for review. No ASN or geolocation details beyond the IP address appear in the intelligence set. The precise delivery mechanism and any associated infrastructure clusters are therefore not yet mapped from the supplied data alone.

Defenders should implement network-level blocks against both the domain amlriskscore.ru and the resolving IP 37.140.192.63 while cross-referencing the two known blocklist entries. Incorporation of the 23 AlienVault OTX pulses into existing feeds supports proactive monitoring. Periodic revalidation of the active status through registrar queries is advised to track any changes in resolution or ownership following the March 03 2026 creation date.