aml-pro[.]org

The domain aml-pro.org was registered on April 2, 2026 through Dynadot Inc and is currently resolved to IP address 45.59.123.90, which geolocates to Switzerland (anyNode). The authoritative nameservers are ns1.dyna-ns.net and ns2.dyna-ns.net. HTTP responses return a 301 redirect and the sole observed page title is "Success!". The site presents a Let’s Encrypt R12 TLS certificate, indicating a valid but freely issued certificate. Reputation data shows a Gridinsoft trust score of 0/100 and the domain appears on a single security blocklist. It has been blocked by PhishDestroy and is listed in eight AlienVault OTX threat‑intelligence pulses, all of which associate the activity with an investment‑scam campaign. VirusTotal analysis involved 94 vendor engines and returned no detections, a result that does not constitute evidence of legitimacy. The domain’s risk level is under investigation, but its active status, low trust score, and inclusion in multiple threat feeds suggest malicious intent. Current evidence does not reveal the exact content or victim interaction flow beyond the generic "Success!" title, leaving the specifics of the phishing landing page unverified. Defensive recommendations include adding the domain and its IP address to blocklists, monitoring DNS queries for the associated nameservers, and employing network‑level filtering to prevent client connections. Continuous re‑evaluation is advised as additional intelligence becomes available.