# aml-resolve.app — SUSPICIOUS

> aml-resolve.app is linked to low-risk phishing activity and currently offline. Avoid sharing personal data and verify site authenticity before use.

## Summary
PhishDestroy identifies aml-resolve.app as a domain associated with generic phishing activity. Classified with a low-risk level, this domain poses potential safety concerns primarily through deceptive practices aimed at tricking users into divulging sensitive information. The domain's registration date is February 21, 2026, which is relatively recent, and it was registered through Dynadot LLC.

Technical analysis shows that aml-resolve.app has been flagged on four separate security blocklists, indicating some level of suspicion from different threat intelligence sources. However, it is noted that only 2 out of 95 security vendors on VirusTotal have detected associated risks, suggesting limited but notable indicators of compromise. The domain resolves to the IP address 172.86.69.234, which is relevant for network-level blocking and forensic tracking.

As of the latest status, the domain aml-resolve.app is taken offline, mitigating immediate risk. Users are advised to remain cautious and avoid interacting with this domain or sharing any personal data if encountered elsewhere. Continuous monitoring is recommended in case of future reactivation or related phishing campaigns leveraging similar infrastructure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Scam type: AML Scam

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Dynadot LLC
- Country: US
- IP: 172.86.69.234
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS14956 RouterHosting LLC
- Nameservers: ["lewis.ns.cloudflare.com", "rafe.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["CRDF", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "Polkadot", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01999aef-683b-76cf-9677-97dc98b5b4a3.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7f2aae21-6979-4244-86e6-4cd2cfb8a948
- PhishDestroy: https://phishdestroy.io/domain/aml-resolve.app/
- LLM endpoint: https://phishdestroy.io/domain/aml-resolve.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aml-resolve.app/
Last updated: 2026-03-19