sanctionscreen[.]org

Analysis indicates sanctionscreen.org remains active as of July 12 2026 with a creation date of October 29 2025 through Mesh Digital Limited and resolution to IP address 185.158.133.1 under an SSL certificate issued by Google Trust Services. The domain carries a Gridinsoft trust score of 1/100 and registers detections across 11 of 95 VirusTotal vendors while appearing in 23 AlienVault OTX pulses and on three security blocklists. Technologies observed include HSTS along with analytics and advertising integrations plus Cloudflare services. The recorded threat classification is brand impersonation executed via a giveaway scam kit that targets the across brand and presents the exact page title Free Crypto Sanctions Screener & OFAC Address Checker | Sanction Screen.

Infrastructure analysis reveals consistent high-risk indicators tied directly to the listed phishing kit and impersonation target without reliance on visual site inspection since page content remains unexamined beyond the supplied title. Registration age exceeds eight months yet the domain continues to evade full remediation as confirmed by its current active status. Multiple independent blocklist inclusions and pulse appearances supply concrete corroboration of malicious reuse rather than isolated false positives.

Defenders should incorporate the exact IP 185.158.133.1 and domain sanctionscreen.org into network and DNS block policies while monitoring for any related subdomains or redirects. Continued observation of the same registrar and hosting patterns can aid identification of additional instances sharing the giveaway scam kit. Uncertainties persist around potential infrastructure migration or kit updates since only the reported snapshot is available for correlation.