Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 3 outgoing records; the latest is dated . The recorded recipient is abuse@porkbun.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
amlstatement[.]info
amlstatement.info की फ़िशिंग और सुरक्षा जाँच
“AML Check - The full-fledged crypto compliance solution”
amlstatement.info — पहुंच योग्य · पहुंच प्रतिबंधित (HTTP 403). ब्रांड प्रतिरूपण: AMLBot; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 13/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); Google Safe Browsing flagged; PhishDestroy score 100/100. रजिस्ट्रार: Porkbun.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Analysis of amlstatement.info indicates a high-risk brand impersonation campaign targeting AMLBot, a crypto compliance platform. The domain was registered on February 21, 2026, through Porkbun LLC and remains active as of July 23, 2026. It resolves to IP 144.124.231.90, hosted on AS216071 (SERVERS TECH FZCO) in the Netherlands, with nameservers under Porkbun's infrastructure. The SSL certificate is issued by Let's Encrypt (serial E8), and the server returns an HTTP 403 status, suggesting access restrictions or defensive measures against automated scans. Detection data reveals 16 of 93 security vendors on VirusTotal flagging the domain, while Google Safe Browsing classifies it as social engineering.
The domain appears on one security blocklist and is referenced in a single AlienVault OTX threat intelligence pulse. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. The page title, 'AML Check - The full-fledged crypto compliance solution,' directly mirrors AMLBot's branding, confirming the impersonation vector. Detected technologies include Ubuntu, Nginx, Unpkg, jsDelivr, and jQuery, which are common in phishing kits but not exclusive to malicious activity. Defenders should treat this domain as confirmed malicious.
Block resolution at the DNS level and monitor for connections to 144.124.231.90 or related AS216071 infrastructure. The HTTP 403 response may indicate evasion tactics, so retrospective log analysis for prior connections is advised. While the exact scam mechanics remain unconfirmed, the combination of brand impersonation, crypto compliance themes, and detection metrics justifies immediate containment. No evidence suggests compromise of legitimate AMLBot infrastructure, but users should verify communications via official channels only.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
दुरुपयोग रिपोर्ट इतिहास · 3 stored reports over 44 days · click to expand
-
Report #1 Escalation 182h still active Feb 6, 2026 · 23:11 UTCESCALATION #2 (182h active): Phishing - amlstatement[.]infoabuse+registry@porkbun.com
-
Report #2 Escalation 272h still active Feb 10, 2026 · 16:53 UTCESCALATION #3 (272h active): Phishing - amlstatement[.]infoabuse+registry@porkbun.com
-
Report #4 ICANN CC 1228h still active Mar 22, 2026 · 16:36 UTCESCALATION #4 (1228h active): Phishing - amlstatement[.]infoabuse@porkbun.com abuse@identitydigital.com compliance@icann.org
तकनीकें · 7 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Fast CDN for everything on npm — serves raw files from npm packages.
Free public CDN for open-source projects, serving files from npm and GitHub.
Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of amlstatement.info · checked Mar 1, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260130-089244 Recipient: abuse@porkbun.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।