amlinfo[.]one

The domain amlinfo.one is currently active and resolves to the IPv4 address 45.59.123.90, which is geolocated to Switzerland. The domain was registered on 2026-04-03 through Dynadot Inc and is served over TLS using a Let’s Encrypt certificate (E8). DNS is delegated to ns1.dyna-ns.net and ns2.dyna-ns.net. HTTP requests receive a 301 redirect and the page title returned is “Success!”. Automated analysis classifies the site as an investment‑scam phishing page. Gridinsoft assigns a trust score of 0/100, and VirusTotal records 12 detections out of 94 scanned engines. The host appears on three public blocklists, including PhishDestroy and SEAL, indicating that multiple threat‑intel feeds have flagged the infrastructure. The risk rating is high and the status remains active. Evidence confirms that the infrastructure is deliberately configured to host a malicious investment‑scam campaign. However, the exact content of the landing page, targeted victims, and any credential‑capture mechanisms have not been publicly disclosed. Defenders should block the domain and its resolving IP at network perimeters, enforce TLS inspection to verify the Let’s Encrypt certificate, and monitor DNS queries for the associated authoritative nameservers. Continued observation is recommended to detect any changes in hosting or content.