amladvisers[.]com[.]au

The domain amladvisers.com.au was registered on 21 February 2026 through a registrar listed as Synergy Wholesale Accreditations Pty Ltd. It is configured with three Australian nameservers (ns1‑ns2‑ns3.nameserver.net.au) and an MX record pointing to amladvisers-com-au.mail.protection.outlook.com. The domain resolves to IP 198.185.159.144, which geolocates to the United States and is associated with a commercial site‑builder hosting service.

An HTTP request to the domain returns a 301 redirect and the page title advertises “AML Advisers Pty Ltd | AML Consultant. Brisbane, Australia”. The underlying site is built with a commercial site‑builder stack, including a commerce module, a JavaScript framework (Stimulus), and enforces HTTP Strict Transport Security. The SSL certificate is identified as version R13.

Reputation data assigns a trust score of 0 out of 100 from a known scoring engine, and the domain appears on a single external blocklist. Scanning by ninety‑five security engines resulted in one detection of malicious activity, confirming the presence of a phishing payload. The campaign is classified as a generic phishing operation with a cryptocurrency lure, and the risk level is marked high. The domain remains active as of the report date.

Defenders should block outbound connections to 198.185.159.144 and add amladvisers.com.au to inbound deny lists. Email filters should be updated to quarantine messages that reference the domain or its MX host. Continuous monitoring of the associated nameservers and MX records is advised, as changes may indicate further malicious infrastructure. Incident response teams should treat any credential or cryptocurrency transaction attempts originating from this domain as compromised.