chkaml[.]xyz

The domain chkaml.xyz is a generic phishing site targeting cryptocurrency users. It operates as a scam page designed to deceive victims into disclosing sensitive information or transferring digital assets, with no specific brand impersonation or drainer kit identified. As of the latest verification, chkaml.xyz has been taken offline, though prior activity classified it as an elevated-risk threat.

Technical indicators confirm chkaml.xyz was flagged by 3 of 95 VirusTotal security vendors, including alphaMountain.ai, Forcepoint ThreatSeeker, and G-Data. The domain was registered through NameCheap, Inc. on June 25, 2025, and resolved to the IP address 198.18.1.30. It appeared on 2 security blocklists (PhishDestroy and ScamSniffer) and lacked an SSL certificate, with its page title displaying as 'chkaml.xyz'. Nameservers were garrett.ns.cloudflare.com and raegan.ns.cloudflare.com, and Gridinsoft assigned it a trust score of 0/100.

Individuals who interacted with chkaml.xyz should immediately revoke any token approvals granted during the session and transfer remaining funds to a new cryptocurrency wallet. Monitor transaction histories for unauthorized activity and report the domain to relevant platforms, including the registrar (NameCheap), security blocklists, and cryptocurrency fraud reporting services like Chainabuse or ScamAdviser. If credentials were entered, change passwords for associated accounts and enable two-factor authentication where available.