analyze-aml[.]app

The domain analyze-aml.app has been identified as a malicious phishing site engaged in brand impersonation, specifically targeting AML Scam. This threat type involves mimicking legitimate AML compliance services to deceive users into providing sensitive information or cryptocurrency funds. The site's page title, 'AMLBot - Comprehensive Crypto Compliance Solution | Free AML Crypto Check,' further reinforces the fraudulent attempt to appear as a trusted crypto compliance tool.

Technical analysis reveals several red flags. VirusTotal reports 9 out of 95 security vendors flagging this domain as malicious. The domain was registered through Dynadot LLC and created on March 06, 2026, which is unusually recent for a legitimate service. It resolves to IP address 172.86.70.33 and uses a Let's Encrypt SSL certificate (E8), which is common among phishing sites due to its free and automated issuance. The domain appears on 3 security blocklists, indicating widespread recognition of its malicious nature. Google Safe Browsing status is not explicitly listed, but the blocklist presence suggests it may be flagged.

Currently, the domain has been taken offline, likely due to abuse reports or hosting provider action. Despite this, the risk remains as similar domains may appear. Users who encountered this site should avoid entering any personal or financial information. PhishDestroy recommends verifying any AML-related URLs through official channels and using real-time threat intelligence tools to check for similar threats. Continued vigilance is advised, as scammers often register new domains to replace taken-down ones.