aml-proverka[.]ru

The domain aml-proverka.ru was registered on 21 February 2026 and presently resolves to the IPv4 address 217.114.14.135, which belongs to AS198610 operated by Beget LLC in Russia. The authoritative nameservers are woz.ns.cloudflare.com and gigi.ns.cloudflare.com, indicating Cloudflare DNS resolution. An SSL certificate issued by Let’s Encrypt (R13) is active, and HTTP requests return a 200 status code. The site’s title reads "AML проверка кошелька криптовалютного адреса: USDT, Биткойн | АМЛ БОТ проверки", and the content is classified as a cryptocurrency‑related brand impersonation targeting Binance. The domain appears on a single security blocklist and has been flagged by PhishDestroy. Reputation scoring from Gridinsoft assigns a 0 out of 100 trust rating. VirusTotal analysis shows that one of ninety‑three security vendors identified the domain as malicious. The overall risk level is reported as high and the campaign remains active. Current intelligence provides concrete indicators of the hosting infrastructure and the malicious intent, but the exact payload, phishing workflow, and victim interaction mechanisms have not been observed. Defenders should add the IP 217.114.14.135 and the domain aml-proverka.ru to inbound and outbound filtering rules, monitor DNS queries for the associated Cloudflare nameservers, and enforce blocklists that include this indicator. Continuous re‑scanning on multi‑engine services is recommended to capture any changes in detection count. Incident response teams should treat any communications referencing Binance and AML verification as potentially fraudulent and advise users to avoid providing wallet credentials or personal information to this site.