# Phishing sites impersonating AMLBot PhishDestroy has recorded 238 phishing domains impersonating AMLBot since 2025-07-10, 2 of them in the last 30 days. The most used registrars are Global Domain and PublicDomainRegistry.com; the most common TLDs are .com and .net. Open AMLBot only from its official app or a saved bookmark. 238Domains, all time 2Last 30 days 61Online at last check 58Confirmed takedowns ## New domains in the last 90 days AMLBot phishing domains detected per day: 11 from 2026-07-25 to 2026-10-22; peak 3. ## How to tell a fake AMLBot site Words most often added to the brand in reported domains: aml, bot, checker, scan, duplicate, disabled, check, amlbotchecker, checkaml, wallet. - Type the address yourself or use a bookmark; phishing links for AMLBot arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - AMLBot does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest AMLBot phishing domains The 50 most recently detected domains impersonating AMLBot Domain | First detected | Status at last check | Registrar | [tronamlbot.xyz](https://phishdestroy.io/domain/tronamlbot.xyz/) | 2026-10-07 | Unknown | NICENIC | [amlbot-check.net](https://phishdestroy.io/domain/amlbot-check.net/) | 2026-09-27 | Online | Cloudflare | [exploreamlbot.com](https://phishdestroy.io/domain/exploreamlbot.com/) | 2026-09-19 | Offline | NAMECHEAP | [amlbot-checker.icu](https://phishdestroy.io/domain/amlbot-checker.icu/) | 2026-09-04 | Offline | PublicDomainRegistry.com | [amlbot-com.click](https://phishdestroy.io/domain/amlbot-com.click/) | 2026-09-04 | Offline | Global Domain | [amlbot-net.website](https://phishdestroy.io/domain/amlbot-net.website/) | 2026-09-04 | Offline | Global Domain | [amlbot-clear.com](https://phishdestroy.io/domain/amlbot-clear.com/) | 2026-08-25 | Offline | Gransy, s.r.o | [duplicate-disabled-388165.invalid](https://phishdestroy.io/domain/duplicate-disabled-388165.invalid/) | 2026-08-08 | Offline | Gransy, s.r.o | [amlbot-wallet.com](https://phishdestroy.io/domain/amlbot-wallet.com/) | 2026-08-08 | Online | Gransy, s.r.o | [amlbot74838.pages.dev](https://phishdestroy.io/domain/amlbot74838.pages.dev/) | 2026-07-31 | Online | Cloudflare Pages | [amlbotfree.org](https://phishdestroy.io/domain/amlbotfree.org/) | 2026-07-29 | Online | Trustname.com | [amlbot.info](https://phishdestroy.io/domain/amlbot.info/) | 2026-06-29 | Offline | Nicnames | [amlbot.lat](https://phishdestroy.io/domain/amlbot.lat/) | 2026-06-29 | Offline | Global Domain | [amlbot.ch](https://phishdestroy.io/domain/amlbot.ch/) | 2026-06-29 | Offline | — | [amlbot.network](https://phishdestroy.io/domain/amlbot.network/) | 2026-06-29 | Offline | PublicDomainRegistry.com | [amlbot-trx.com](https://phishdestroy.io/domain/amlbot-trx.com/) | 2026-06-29 | Offline | Dynadot | [amlbot.bio](https://phishdestroy.io/domain/amlbot.bio/) | 2026-06-28 | Online | Nicnames | [amlbot-eu.ink](https://phishdestroy.io/domain/amlbot-eu.ink/) | 2026-06-27 | Offline | NameSilo | [amlbot-eu.help](https://phishdestroy.io/domain/amlbot-eu.help/) | 2026-06-26 | Offline | NameSilo | [amlbot.rest](https://phishdestroy.io/domain/amlbot.rest/) | 2026-06-19 | Online | Global Domain | [amlbot-app.one](https://phishdestroy.io/domain/amlbot-app.one/) | 2026-06-15 | Offline | Global Domain | [amlbot.club](https://phishdestroy.io/domain/amlbot.club/) | 2026-05-29 | Taken down | Global Domain | [amlbotpro.vip](https://phishdestroy.io/domain/amlbotpro.vip/) | 2026-05-17 | Offline | NameCheap | [amlbot.sale](https://phishdestroy.io/domain/amlbot.sale/) | 2026-05-13 | Offline | Global Domain | [amlbot-scan.com](https://phishdestroy.io/domain/amlbot-scan.com/) | 2026-05-09 | Online | Dynadot | [scan-crypto.info](https://phishdestroy.io/domain/scan-crypto.info/) | 2026-04-27 | Taken down | Global Domain | [web3-amlbot.xyz](https://phishdestroy.io/domain/web3-amlbot.xyz/) | 2026-04-15 | Taken down | Dynadot | [api-amlbot.xyz](https://phishdestroy.io/domain/api-amlbot.xyz/) | 2026-04-15 | Unknown | NICENIC | [amlbot-crypto.one](https://phishdestroy.io/domain/amlbot-crypto.one/) | 2026-03-30 | Online | Dynadot | [app-amlbot.pages.dev](https://phishdestroy.io/domain/app-amlbot.pages.dev/) | 2026-03-29 | Offline | Cloudflare | [amlbotcheck.io](https://phishdestroy.io/domain/amlbotcheck.io/) | 2026-03-28 | Offline | Global Domain | [amlbotcheck-io.pages.dev](https://phishdestroy.io/domain/amlbotcheck-io.pages.dev/) | 2026-03-28 | Offline | Cloudflare | [trustamlbot.com](https://phishdestroy.io/domain/trustamlbot.com/) | 2026-03-28 | Online | Internet Domain Service BS | [amlbot.run](https://phishdestroy.io/domain/amlbot.run/) | 2026-03-22 | Offline | PublicDomainRegistry.com | [quickamlbot.com](https://phishdestroy.io/domain/quickamlbot.com/) | 2026-03-22 | Offline | TUCOWS.COM | [1amlbot.com](https://phishdestroy.io/domain/1amlbot.com/) | 2026-03-17 | Offline | Dynadot | [amlbotusa.com](https://phishdestroy.io/domain/amlbotusa.com/) | 2026-03-15 | Offline | NameSilo | [verification-trade.com](https://phishdestroy.io/domain/verification-trade.com/) | 2026-03-14 | Offline | Hello Internet | [api.trusteglobalplus.com](https://phishdestroy.io/domain/api.trusteglobalplus.com/) | 2026-03-13 | Offline | Tucows Domains | [aml-bot-trust.com](https://phishdestroy.io/domain/aml-bot-trust.com/) | 2026-03-13 | Online | NiceNIC | [amlbot.amlprocessing.site](https://phishdestroy.io/domain/amlbot.amlprocessing.site/) | 2026-03-12 | Offline | Web Commerce Communications | [ai-amlbot.xyz](https://phishdestroy.io/domain/ai-amlbot.xyz/) | 2026-03-12 | Offline | Porkbun | [walletchekaml.com](https://phishdestroy.io/domain/walletchekaml.com/) | 2026-03-12 | Offline | Hello Internet | [aml-fullcheck.com](https://phishdestroy.io/domain/aml-fullcheck.com/) | 2026-03-12 | Offline | Hello Internet | [aml-kyc.online](https://phishdestroy.io/domain/aml-kyc.online/) | 2026-03-12 | Online | REGRU-RU | [trustcheck.top](https://phishdestroy.io/domain/trustcheck.top/) | 2026-03-10 | Unknown | NiceNIC | [botscan-aml.com](https://phishdestroy.io/domain/botscan-aml.com/) | 2026-03-09 | Offline | Global Domain | [analytics-aml.com](https://phishdestroy.io/domain/analytics-aml.com/) | 2026-03-09 | Offline | Realtime Register | [amltrc.pro](https://phishdestroy.io/domain/amltrc.pro/) | 2026-03-07 | Online | Global Domain | [amlclean.app](https://phishdestroy.io/domain/amlclean.app/) | 2026-03-07 | Offline | PublicDomainRegistry.com | [All 238 AMLBot reports](https://phishdestroy.io/domain/?brand=AMLBot) ## Where they are registered and hosted ### Registrars - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)24 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)24 - [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)15 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)14 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)13 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)10 - Cloudflare9 - [Hello Internet](https://phishdestroy.io/registrar/hello-internet/)7 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)95 - [.net](https://phishdestroy.io/tld/net/)11 - [.app](https://phishdestroy.io/tld/app/)10 - [.info](https://phishdestroy.io/tld/info/)9 - [.pro](https://phishdestroy.io/tld/pro/)7 - [.icu](https://phishdestroy.io/tld/icu/)7 - [.org](https://phishdestroy.io/tld/org/)7 - [.help](https://phishdestroy.io/tld/help/)6 ### Hosting networks - CLOUDFLARENET, US72 - Cloudflare, Inc.56 - CLOUDFLARENET - Cloudflare, Inc., US15 - AMAZON-02, US10 - GCS-AS GLOBAL CONNECTIVITY SOLUTIONS LLP, GB4 - ROUTERHOSTING, US4 - PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED, GB4 - FlorianKolb Florian Kolb, DE3 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is AMLBot; share of all PhishDestroy reports: 0.11%. Canonical: https://phishdestroy.io/brand/amlbot/