# amlconfirm.site — MALICIOUS

> amlconfirm.site is a live crypto drainer site—10/95 scanners flag it. Users who clicked should verify on PhishDestroy immediately.

## Summary
PhishDestroy identifies amlconfirm.site as an active crypto drainer domain designed to steal cryptocurrency by tricking users into connecting their wallets or entering seed phrases. The site leverages deceptive naming (‘amlconfirm’) to appear legitimate, targeting individuals expecting anti-money laundering (AML) confirmations.  This domain was flagged by 10 out of 95 VirusTotal security vendors and resolves to IP 188.114.97.3. It was registered through Web Commerce Communications Limited (WebNic.cc) on March 12, 2026, and operates with a valid Let’s Encrypt SSL certificate, increasing its credibility. The recent registration and active status suggest this campaign is currently operational.  If you visited amlconfirm.site, do not enter any wallet addresses, seed phrases, or personal data. Disconnect your device from the internet immediately and scan for malware. Report the domain to PhishDestroy to help block further abuse. Avoid re-accessing the site, and warn others who may have received similar links. Always verify URLs and use multi-factor authentication for crypto wallets.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-12 11:47:54
- Registrar: Web Commerce Communications Limited dba WebNic.cc
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/56c916df-ea8b-426c-95cd-74f811b78e9c
- PhishDestroy: https://phishdestroy.io/domain/amlconfirm.site/
- LLM endpoint: https://phishdestroy.io/domain/amlconfirm.site/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/amlconfirm.site/
Last updated: 2026-03-23