amlverifier[.]guru

The domain amlverifier.guru is an active phishing site impersonating an Anti-Money Laundering (AML) verification service, as indicated by its page title 'AML Verifier' and classification as an investment scam. Registered on May 23, 2026, through Global Domain Group LLC, the domain resolves to IP address 195.20.115.192, hosted on infrastructure located in Hungary and managed by ServerAstra Kft. The site employs nameservers ns1.globaldomaingroup.com and ns2.globaldomaingroup.com, a pattern consistent with domains registered via the same provider. Technical indicators reveal the use of Ubuntu and Nginx web server technologies, with a valid Let's Encrypt SSL certificate (R12) to present a false sense of legitimacy. Analysis shows the domain is flagged by one security blocklist and detected by 3 of 91 vendors in a recent scan. The Gridinsoft trust score of 0/100 further supports its malicious classification. While the exact content and targeting mechanisms of the site remain unconfirmed due to limited page analysis, the combination of its naming, registration details, and hosting infrastructure aligns with known phishing operations targeting financial or investment-related victims. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. Monitoring for connections to 195.20.115.192 or domains sharing the same nameserver infrastructure may help identify related threats. Given the domain's recent creation and active status, further investigation into its traffic patterns and potential victim interactions is recommended.