amlscan[.]zip

The domain amlscan.zip has been assessed as having an elevated risk level due to its involvement in brand impersonation. The specific threat posed by this domain is the impersonation of a legitimate AML Scam service, potentially leading to financial or personal data theft from unsuspecting users.

Analysis indicates that amlscan.zip is registered through Tucows Domains Inc. and was created on February 21, 2026. The domain resolves to the IP address 138.124.67.249 and appears on 2 security blocklists: ScamSniffer and PhishDestroy. VirusTotal reports that 4 out of 95 security vendors flag this domain, which is currently taken offline. The website's page title, 'Crypto AML Check - Cryptocurrency Transaction Monitoring Solution | Sumsub,' suggests it is mimicking a legitimate service. Additionally, the Gridinsoft trust score for this domain is 0 out of 100, indicating a high level of distrust. The technologies detected on the site include React and Nginx.

To mitigate the risk of brand impersonation, users should verify the authenticity of the domain by cross-referencing it with official sources. Organizations should update their security policies to include this domain in their blocklists and educate employees about the signs of phishing and impersonation. Network administrators should monitor for any attempts to access this domain and implement DNS filtering to prevent such access. Regular security audits and user training can significantly reduce the likelihood of falling victim to brand impersonation attacks.