trustamlbot[.]net

This domain, trustamlbot.net, is flagged as a brand impersonation threat targeting users of the Across protocol, a cross-chain bridging service. The site displays a page titled 'AML Check — Мониторинг криптотранзакций,' suggesting it masquerades as a cryptocurrency transaction monitoring tool. Analysis indicates the site likely aims to deceive users into disclosing sensitive information, such as wallet credentials or private keys, under the guise of compliance or security checks. The use of Russian in the page title further suggests targeting of non-English-speaking users, potentially expanding the attack surface beyond typical English-centric campaigns.

Technical indicators confirm the domain's malicious intent. trustamlbot.net was registered on September 27, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with low-reputation domains. VirusTotal reports that 1 of 95 security vendors flags the domain as malicious, a low but non-negligible detection rate that aligns with emerging or evasive threats. The domain resolves to the IP address 84.32.84.10, which has been observed in prior phishing infrastructure. Additionally, the domain appears on one security blocklist and is actively blocked by at least one threat intelligence feed, reinforcing its classification as a confirmed impersonation threat.

Users who visited trustamlbot.net should take immediate action to mitigate potential risks. First, disconnect any wallets or accounts linked to the site and revoke permissions granted to unknown or suspicious applications. Monitor all connected accounts for unauthorized transactions or changes. If credentials or private keys were entered, assume they are compromised and transfer assets to a new, secure wallet. Report the incident to relevant platforms, such as the impersonated brand’s official security channels, to aid in broader threat mitigation efforts. Regularly update security tools and enable multi-factor authentication to reduce future exposure to similar threats.