amldetectionservices[.]us

amldetectionservices.us is currently active and classified as a high‑risk generic phishing site. The domain was created on May 22 2026 and registered through Web Commerce Communications Limited dba WebNic.cc. DNS resolution is delegated to Cloudflare’s authoritative nameservers (anderson.ns.cloudflare.com and april.ns.cloudflare.com) and resolves to the IP address 172.67.146.212, which is part of Cloudflare’s globally distributed edge network.

This hosting choice is frequently employed by threat actors to benefit from rapid content delivery and to obscure the true backend infrastructure. VirusTotal data indicates that 16 of 91 security vendors have flagged the domain, providing a baseline of detection across multiple scanning engines. The domain is listed on three public blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that several anti‑phishing services have already taken mitigation actions.

No publicly available information on SSL/TLS certificate details, HTTP status codes, page title, or targeted brand has been observed, leaving the precise phishing lure and credential‑stealing mechanisms uncertain. Defenders should enforce DNS‑level blocking for amldetectionservices.us, update firewall and proxy rules to deny traffic to the associated Cloudflare IP range, and incorporate the domain into internal threat‑intel feeds. Continuous monitoring of VirusTotal updates, blocklist revisions, and any future content analysis is advised to refine detection signatures and to identify potential shifts in hosting or campaign tactics.