# aml-safety.one — SUSPICIOUS

> Avoid aml-safety.one, a low-risk phishing domain detected on multiple blocklists. Stay safe by not visiting this offline website.

## Summary
PhishDestroy identifies aml-safety.one as a generic phishing domain posing a low risk to users. The domain was created recently and aimed to deceive victims through fraudulent means.

The domain aml-safety.one resolved to IP address 216.126.229.237 and was registered via Dynadot LLC. Despite being flagged by 2 out of 95 VirusTotal vendors and appearing on two security blocklists, its overall threat level remains low.

Currently, aml-safety.one is offline and inaccessible. Users and organizations are advised not to visit this domain or interact with any related links to maintain security.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Scam type: AML Scam
- Page title: aml-safety.one

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Dynadot LLC
- Country: US
- IP: 216.126.229.237
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS30823 aurologic GmbH
- Nameservers: ["ns1.dyna-ns.net", "ns2.dyna-ns.net"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["CRDF", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199b185-e348-7761-b4f2-6b331cbeb113.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/426edeff-ab72-4684-81b9-46a689ec3e89
- PhishDestroy: https://phishdestroy.io/domain/aml-safety.one/
- LLM endpoint: https://phishdestroy.io/domain/aml-safety.one/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aml-safety.one/
Last updated: 2026-03-19