amldashboard[.]vladislav[.]vip

The domain amldashboard.vladislav.vip has been confirmed as a phishing portal specifically targeting anti-money laundering (AML) compliance processes. Analysis indicates the site was designed to mimic legitimate AML verification systems, likely to harvest sensitive financial credentials or facilitate fraudulent transactions under the guise of regulatory compliance. Currently, the domain is offline, though prior activity suggests it was operational for malicious purposes. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 25, 2026, an unusually forward-dated registration that may indicate an attempt to evade immediate scrutiny. It resolved to the IP address 152.70.52.21 and was hosted on a server running Ubuntu with Nginx. Security vendors flagged the domain in 2 of 95 VirusTotal scans, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one security blocklist and was actively blocked by at least one threat intelligence feed prior to being taken offline. The elevated risk level associated with this domain stems from its targeted nature, impersonating AML systems to exploit financial sector employees or customers. While currently inactive, the infrastructure remains a potential threat vector. Organizations are advised to block the domain and its associated IP at the perimeter, monitor for related indicators of compromise, and educate personnel on recognizing AML-themed phishing attempts. Historical logs should be reviewed for connections to 152.70.52.21 or requests to amldashboard.vladislav.vip to identify any prior exposure.