Phishing sites impersonating AMLBot

PhishDestroy has recorded 238 phishing domains impersonating AMLBot since 2025-07-10, 2 of them in the last 30 days. The most used registrars are Global Domain and PublicDomainRegistry.com; the most common TLDs are .com and .net. Open AMLBot only from its official app or a saved bookmark.

238
Domains, all time
2
Last 30 days
61
Online at last check
58
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 12026-07-30: 02026-07-31: 12026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 22026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 12026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 32026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 12026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 12026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 12026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
AMLBot phishing domains detected per day: 11 from 2026-07-25 to 2026-10-22; peak 3.

How to tell a fake AMLBot site

Words most often added to the brand in reported domains: aml, bot, checker, scan, duplicate, disabled, check, amlbotchecker, checkaml, wallet.

  • Type the address yourself or use a bookmark; phishing links for AMLBot arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • AMLBot does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest AMLBot phishing domains

The 50 most recently detected domains impersonating AMLBot
DomainFirst detectedStatus at last checkRegistrar
tronamlbot.xyz2026-10-07UnknownNICENIC
amlbot-check.net2026-09-27OnlineCloudflare
exploreamlbot.com2026-09-19OfflineNAMECHEAP
amlbot-checker.icu2026-09-04OfflinePublicDomainRegistry.com
amlbot-com.click2026-09-04OfflineGlobal Domain
amlbot-net.website2026-09-04OfflineGlobal Domain
amlbot-clear.com2026-08-25OfflineGransy, s.r.o
duplicate-disabled-388165.invalid2026-08-08OfflineGransy, s.r.o
amlbot-wallet.com2026-08-08OnlineGransy, s.r.o
amlbot74838.pages.dev2026-07-31OnlineCloudflare Pages
amlbotfree.org2026-07-29OnlineTrustname.com
amlbot.info2026-06-29OfflineNicnames
amlbot.lat2026-06-29OfflineGlobal Domain
amlbot.ch2026-06-29Offline—
amlbot.network2026-06-29OfflinePublicDomainRegistry.com
amlbot-trx.com2026-06-29OfflineDynadot
amlbot.bio2026-06-28OnlineNicnames
amlbot-eu.ink2026-06-27OfflineNameSilo
amlbot-eu.help2026-06-26OfflineNameSilo
amlbot.rest2026-06-19OnlineGlobal Domain
amlbot-app.one2026-06-15OfflineGlobal Domain
amlbot.club2026-05-29Taken downGlobal Domain
amlbotpro.vip2026-05-17OfflineNameCheap
amlbot.sale2026-05-13OfflineGlobal Domain
amlbot-scan.com2026-05-09OnlineDynadot
scan-crypto.info2026-04-27Taken downGlobal Domain
web3-amlbot.xyz2026-04-15Taken downDynadot
api-amlbot.xyz2026-04-15UnknownNICENIC
amlbot-crypto.one2026-03-30OnlineDynadot
app-amlbot.pages.dev2026-03-29OfflineCloudflare
amlbotcheck.io2026-03-28OfflineGlobal Domain
amlbotcheck-io.pages.dev2026-03-28OfflineCloudflare
trustamlbot.com2026-03-28OnlineInternet Domain Service BS
amlbot.run2026-03-22OfflinePublicDomainRegistry.com
quickamlbot.com2026-03-22OfflineTUCOWS.COM
1amlbot.com2026-03-17OfflineDynadot
amlbotusa.com2026-03-15OfflineNameSilo
verification-trade.com2026-03-14OfflineHello Internet
api.trusteglobalplus.com2026-03-13OfflineTucows Domains
aml-bot-trust.com2026-03-13OnlineNiceNIC
amlbot.amlprocessing.site2026-03-12OfflineWeb Commerce Communications
ai-amlbot.xyz2026-03-12OfflinePorkbun
walletchekaml.com2026-03-12OfflineHello Internet
aml-fullcheck.com2026-03-12OfflineHello Internet
aml-kyc.online2026-03-12OnlineREGRU-RU
trustcheck.top2026-03-10UnknownNiceNIC
botscan-aml.com2026-03-09OfflineGlobal Domain
analytics-aml.com2026-03-09OfflineRealtime Register
amltrc.pro2026-03-07OnlineGlobal Domain
amlclean.app2026-03-07OfflinePublicDomainRegistry.com

All 238 AMLBot reports

Where they are registered and hosted

Registrars

  1. Global Domain24
  2. PublicDomainRegistry.com24
  3. Web Commerce Communications15
  4. Dynadot14
  5. NiceNIC13
  6. NameSilo10
  7. Cloudflare9
  8. Hello Internet7

Top-level domains

  1. .com95
  2. .net11
  3. .app10
  4. .info9
  5. .pro7
  6. .icu7
  7. .org7
  8. .help6

Hosting networks

  1. CLOUDFLARENET, US72
  2. Cloudflare, Inc.56
  3. CLOUDFLARENET - Cloudflare, Inc., US15
  4. AMAZON-02, US10
  5. GCS-AS GLOBAL CONNECTIVITY SOLUTIONS LLP, GB4
  6. ROUTERHOSTING, US4
  7. PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED, GB4
  8. FlorianKolb Florian Kolb, DE3

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is AMLBot; share of all PhishDestroy reports: 0.11%.