amltrackers[.]net

Analysis of amltrackers.net, reported on July 24, 2026, indicates that the domain is currently offline but exhibits multiple indicators of malicious activity. The domain was registered on February 21, 2026 through HOSTINGER operations, UAB and uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution points to the IP address 147.93.73.33, which belongs to AS47583 Hostinger International Limited and is geolocated in Lithuania. No SSL certificate is presented for the host, meaning HTTPS connections would be unencrypted.

The page title returned from the site is "AML," and the intelligence set labels the scam type as an Investment Scam that impersonates the brand "across." The domain appears on three external security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple defensive services have identified it as hostile. VirusTotal reports a single detection out of ninety‑five security vendors, reinforcing the presence of at least one vendor‑level flag. Gridinsoft assigns a trust score of zero out of one hundred, indicating a complete lack of confidence in the domain’s legitimacy. While the site is no longer reachable, the combination of recent registration, use of a hosting provider known for rapid provisioning, absence of TLS, low trust scoring, and active blocklist inclusion suggests a high likelihood that the domain was employed for fraudulent investment solicitations.

Defenders should continue to block the domain at network perimeter devices, update URL filtering and threat intelligence feeds with the observed indicators, and monitor for any resurgence of the same IP address or similar registration patterns. Because the site is offline, direct content analysis is unavailable, and the exact phishing kit or page layout remains unknown. Continuous observation of related hostings and registrars is recommended to detect potential re‑use of the infrastructure.