amllbott[.]com

The domain amllbott.com was registered on February 21, 2026 through Key-Systems GmbH. It resolves to the IP address 188.114.96.3, which is part of Cloudflare’s network (AS13335) located in the United States. The authoritative nameservers are ns1.emailverification.info and ns2.emailverification.info, both of which are unrelated to the registrant and suggest a third‑party DNS service. Technical probing shows the site returns HTTP 200 without an SSL certificate, indicating an insecure delivery channel. VirusTotal scans have flagged the domain in 14 out of 95 security vendors, and the Gridinsoft trust score is 0 out of 100. The domain appears on a single public blocklist and is already blocked by PhishDestroy, confirming its malicious status. The landing page bears the title “Contact Verification Suspension Page,” a classic social‑engineering lure designed to compel users to submit credentials or payment information. The listed scam type is cryptocurrency, suggesting the operators are attempting to harvest crypto wallet addresses or trick victims into transferring digital assets under the pretense of a verification hold. Current intelligence does not reveal the full payload or the exact phishing workflow beyond the initial credential‑collection page. Email templates, targeted brands, and the downstream command‑and‑control infrastructure remain unknown, limiting attribution and impact assessment. Defenders should add amllbott.com to outbound and inbound filtering rules, enforce TLS inspection to capture clear‑text payloads, and monitor for DNS queries to the associated nameservers. Network telemetry should be inspected for connections to 188.114.96.3, and any observed credential submissions should be treated as compromised. Updating detection signatures with the observed page title and domain indicators will help prevent further victimization.