b2c2-amm[.]net

Analysis of b2c2-amm.net indicates a high‑risk investment‑scam infrastructure. The domain was registered on 2026-04-28 through Gname.com Pte. Ltd. and is hosted behind Cloudflare, resolving to IP 104.21.19.28 (Cloudflare, Inc., CA). Both authoritative nameservers are Cloudflare (ace.ns.cloudflare.com, raquel.ns.cloudflare.com), and the site serves a TLS certificate issued by Google Trust Services / WE1, confirming HTTPS availability. The page title advertises a “One‑Stop Global Investment Platform” covering forex, commodities, stocks, indices, cryptocurrencies, gold and oil, matching the listed scam type of investment fraud. Security telemetry shows a Gridinsoft trust score of 0/100 and the domain is currently listed on three security blocklists. It is actively blocked by PhishDestroy, MetaMask and SEAL, indicating that multiple protective services have identified it as malicious. Email handling is delegated to mail.emb666.com (priority 1 MX), a mail host frequently observed in malicious campaigns. Detected technologies include Vue.js, HTTP/3, HSTS, and Cloudflare Browser Insights, all typical of modern phishing sites that leverage legitimate CDNs to hide origin. Given the recent registration, low trust score, presence on blocklists, and explicit investment‑scam positioning, defenders should treat b2c2-amm.net as a high‑confidence threat. Recommended actions include network‑level blocking of the domain and its resolved IP, monitoring for DNS queries to the associated nameservers, and flagging any outbound connections to mail.emb666.com. Continuous watch for new indicators is advised, as the infrastructure may evolve.