aml[.]gmfinance[.]co[.]nz

The domain aml.gmfinance.co.nz is flagged as a high-risk generic phishing site. The page title 'Golden Mountain AML Traning Blog' suggests that the site may be attempting to mimic a legitimate training resource or blog, potentially to lure unsuspecting users into providing sensitive information. The domain is registered through Dreamscape Networks International Pte Ltd, trading as Crazy Domains, and is currently active. Infrastructure analysis reveals that the domain resolves to the IP address 3.169.183.41, located in the United States and associated with AS16509 Amazon.com, Inc. The site is built using Hugo and is hosted on Amazon Web Services, with content delivery managed by Amazon S3 and Amazon CloudFront. The nameservers used are ns-1017.awsdns-63.net, ns-1387.awsdns-45.org, ns-1726.awsdns-23.co.uk, and ns-1871.awsdns-41.com, all of which are part of Amazon's DNS infrastructure. The SSL certificate for the domain is issued by Amazon, using an RSA 2048-bit key. While the exact content of the site has not been fully analyzed, the Gridinsoft trust score of 0/100 and its appearance on one security blocklist indicate a high level of risk. Additionally, the domain is blocked by PhishDestroy, further confirming its malicious nature. Defenders should immediately block access to this domain and monitor network traffic for any attempts to reach it. Organizations should also educate their employees about the risks of AML scams and the importance of verifying the authenticity of any training resources or blogs before interacting with them.