aml-auditscan[.]com

aml-auditscan.com was registered on 21 February 2026 through Dynadot LLC. The domain resolves to 216.126.229.109, an address located in Germany and assigned to AS30823 (aurologic GmbH). DNS is served by ns1.dyna-ns.net and ns2.dyna-ns.net. The site presents an SSL certificate with the common name “localhost”, indicating a self‑signed or mis‑configured certificate. HTTP requests receive a 200 response and the page title reports “AMLBot – Comprehensive Crypto Compliance Solution | Free AML Crypto Check”, classifying the content as a crypto‑related compliance offering. Threat intelligence tags the site as a crypto scam and generic phishing, and it appears on one security blocklist; PhishDestroy has actively blocked the domain. Gridinsoft assigns a trust score of 0/100. VirusTotal analysis shows 2 of 93 scanners flag the domain, confirming malicious activity. The domain remains active as of the report date. Current evidence confirms the infrastructure and phishing intent, but the exact payload or credential‑capture mechanisms have not been observed. Defenders should block network traffic to 216.126.229.109, add the domain to URL filtering lists, monitor DNS queries for the associated nameservers, and treat any credential submission to the site as compromised.