amlcheck[.]bet

This domain, amlcheck.bet, is flagged as a confirmed phishing site specializing in brand impersonation targeting DexScreener, a popular cryptocurrency analytics platform. The page title 'HODLESS' suggests an attempt to lure victims with fraudulent investment or token-drain schemes, a common tactic in crypto-focused phishing operations. Analysis indicates the infrastructure is designed to harvest wallet credentials or deploy malicious smart contracts under the guise of legitimate trading tools. Infrastructure analysis reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 104.21.3.84. Detection metrics show elevated risk levels, with 3 out of 95 security vendors on VirusTotal flagging the domain as malicious. The domain appears on two independent security blocklists and is assigned a trust score of 0/100 by Gridinsoft. No creation date is available in the provided data, but the combination of registrar choice, hosting IP, and detection patterns aligns with known phishing infrastructure. The domain has been taken offline, reducing immediate risk to users. However, historical patterns suggest threat actors may re-deploy similar infrastructure using slight variations in domain names or hosting providers. Users who interacted with the site should assume credential exposure and revoke access to any connected wallets or applications. Monitoring for unauthorized transactions and implementing multi-factor authentication on crypto-related accounts is advised. The elevated risk level persists due to the likelihood of recurring campaigns from the same operators.