saplen[.]xyz

The domain saplen.xyz was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to the IP address 91.92.242.155, which is assigned to AS202412 owned by Omegatech LTD and geolocated in the Netherlands. The host presents an SSL certificate rated R13, indicating a low‑trust certification. A Gridinsoft trust score of 0 out of 100 further confirms the site’s malicious reputation.

VirusTotal scans have flagged the domain in 14 of 93 security engines, and the site has been added to a single security blocklist and actively blocked by PhishDestroy. The page title returned by the server reads “Unlock Finance Success with AMLTestWallet & AMLCheck 2!”, suggesting a financial‑oriented crypto lure. The domain is catalogued as a crypto scam and is associated with brand impersonation of the csgo brand.

While the offline status prevents real‑time content inspection, the combination of a newly created domain, low trust scores, multiple vendor detections, and a title that advertises AML‑related wallet services provides concrete evidence of a fraudulent operation. Defenders should add the domain and its hosting IP to deny lists, monitor for any re‑hosting attempts, and watch for similar naming patterns that combine finance‑related keywords with brand references. Continuous observation of threat‑intel feeds for related indicators is advised.