aml-info[.]one

The domain aml-info.one is identified as a generic phishing site and is currently offline. The specific threat posed by this domain involves attempts to deceive users into providing sensitive information, such as login credentials or financial data, which can be exploited for fraudulent purposes.

Analysis indicates that aml-info.one has been flagged by 13 out of 95 VirusTotal vendors, suggesting a significant level of suspicion. The domain is registered through Dynadot Inc and resolves to the IP address 45.59.123.90, which is located in Switzerland (CH) under the provider anyNode. The domain was created on April 02, 2026, and uses an SSL certificate issued by Let's Encrypt, model R12. It appears on one security blocklist and is specifically blocked by PhishDestroy, further indicating its association with phishing activities.

Given the current offline status of aml-info.one, users are advised to exercise caution if the domain becomes active again. It is recommended to avoid interacting with this domain and to report any suspicious activity to relevant cybersecurity authorities. Organizations should update their security protocols to include this domain in their threat intelligence databases and ensure that employees are aware of the risks associated with phishing sites.