The domain amlbotfree.org was registered on July 09, 2026 through the registrar Fewmoretaps OU operating under the trade name Trustname.com. Its authoritative name servers include ares.trustname.com, zeus.trustname.com, ns1.anycastdns.cz and ns2.anycastdns.cz, which resolve the domain to the IPv4 address 186.2.175.35. The address is currently listed by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that at least one threat‑intelligence feed has flagged the host.
VirusTotal analysis shows that two of ninety‑one scanning engines have raised detections for the domain, reinforcing the suspicion of malicious activity. The domain is classified as a generic phishing campaign and remains active as of the report date, July 29, 2026. Observations confirm that the registration information, hosting infrastructure, and limited vendor detections provide concrete evidence of abuse.
However, no public information is available regarding SSL certificate details, HTTP response codes, page title, or any associated malware kits, leaving the exact payload and victim interaction unknown. Defenders should block traffic to 186.2.175.35 and add amlbotfree.org to local deny lists, monitor DNS queries for the listed name servers, and consider sharing the indicator set with upstream filtering services. Continuous re‑evaluation is advised, as additional detections may emerge from further scanning or community reporting.