Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@ionos.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
ai-compliance-check[.]app
“Hilker Consulting”
ai-compliance-check.app — Belum terverifikasi. Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 85/100. Registrar: 1&1 Internet SE.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy identifies the domain ai-compliance-check.app as an active crypto drainer impersonating the AML Scam brand. This site leverages a decoy compliance tool interface to trick users into connecting crypto wallets, likely harvesting funds via smart contract interactions. The infrastructure is lightweight, using a single-page application to mimic legitimate AML verification tools while siphoning assets under the guise of ‘security checks.’
This domain was flagged on two security blocklists and is currently blocked by MetaMask and SEAL. Technical indicators include a VirusTotal score of 1/95 detections, registration via 1&1 Internet SE, and resolution to IP 185.158.133.1. The domain was created on April 11, 2026, and holds an SSL certificate from Google Trust Services, which may lend false legitimacy. Despite zero detections on VirusTotal, dynamic analysis suggests this is a rapidly evolving threat vector targeting compliance-aware users.
While the site remains active, PhishDestroy’s automated systems continue to monitor its behavior and distribution channels. Immediate risk is assessed as moderate due to low detection signatures but high operational threat. Users are advised to avoid interacting with ai-compliance-check.app and verify any unknown domains using PhishDestroy’s real-time lookup tools. Until further behavioral analysis is completed, this domain should be considered HIGH RISK for wallet compromise and asset theft.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ai-compliance-check.app |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 2 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAnalisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of ai-compliance-check.app · checked Apr 12, 2026
Analisis Konfigurasi Situs
Bukti & Laporan Eksternal
PD-20260412-4CCF16 Recipient: abuse@ionos.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive