# amlverify.live — MALICIOUS

> amlverify.live is a credential phishing site. Avoid interaction and verify URLs before sharing sensitive info to stay safe online.

## Summary
PhishDestroy identifies amlverify.live as a credential phishing domain designed to harvest user credentials. The domain was registered recently on February 21, 2026, and is classified under medium risk due to its potential to deceive users into submitting sensitive data.

Technical analysis reveals amlverify.live was flagged across five distinct security blocklists, confirming its malicious intent. Despite being relatively new, the domain showed suspicious registration practices, including the use of a dead domain registrar. VirusTotal scanners detected malicious activity with multiple security vendors flagging the domain.

Currently, amlverify.live has been taken offline, mitigating active threats posed to users. PhishDestroy advises vigilance and recommends users avoid interacting with this domain. Continuous monitoring is in place to track any resurgence or related malicious infrastructure.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Scam type: AML Scam
- Target brand: AML Scam
- Page title: amlverify.live | 521: Web server is down

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 2606:4700:3033::ac43:b3af
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["augustus.ns.cloudflare.com", "virginia.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["alphaMountain.ai", "BitDefender", "Fortinet", "G-Data", "Seclookup"]
- Google Safe Browsing: clean
- Blocklists: 5 hits
  Lists: ["PhishDestroy", "ScamSniffer", "Polkadot", "Enkrypt", "Codeesura"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198861b-20ae-71b9-b4b6-2b572f1fdfee.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bcb9b493-7cea-453e-b347-eb7cb57d9343
- PhishDestroy: https://phishdestroy.io/domain/amlverify.live/
- LLM endpoint: https://phishdestroy.io/domain/amlverify.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/amlverify.live/
Last updated: 2026-03-19