amlcheck[.]lat
“AMLScore and AMLBot: Enhancing DeFi Compliance Solutions”
amlcheck.lat — Konten tidak tersedia. Peniruan identitas merek: Binance; Jenis penipuan: Investment Scam. Ringkasan bukti: VirusTotal 1/95 (Gridinsoft); 1 external blocklist match (ScamSniffer); PhishDestroy score 58/100. Registrar: PDR.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain amlcheck.lat was registered on September 09, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IPv4 address 62.60.244.128. The IP is allocated to AS203273 NetCrafters OU and geolocates to Germany. DNS resolution is delegated to jihoon.ns.cloudflare.com and katja.ns.cloudflare.com, indicating use of Cloudflare's authoritative nameserver infrastructure. No TLS certificate is presented for the site, which means HTTPS connections are not available. The web page title returned by the server, "AMLScore and AMLBot: Enhancing DeFi Compliance Solutions," suggests an attempt to appear as a compliance or DeFi service, yet the page content has not been publicly analyzed.
The domain explicitly impersonates the cryptocurrency exchange Binance, as indicated by the brand target field, and is classified as an investment scam. Threat intelligence feeds have flagged the domain: one of ninety-five VirusTotal security vendors reported a detection, and the site appears on two blocklists, specifically PhishDestroy and ScamSniffer. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The domain status is listed as offline at the time of reporting, which may indicate the operators have temporarily removed the site.
Defenders should continue to block traffic to 62.60.244.128 and add amlcheck.lat to URL filtering rules. Monitoring of the associated IP and the Cloudflare nameservers for re‑activation is advised, as the infrastructure could be repurposed for future campaigns. Because the site is not serving TLS and lacks a valid certificate, interception of any attempted connections would be straightforward. Analysts should also flag the registration details for potential abuse patterns linked to PublicDomainRegistry.com, and consider sharing the indicators of compromise with broader threat‑sharing platforms to aid collaborative mitigation.
Sinyal Keamanan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive