walletchekaml[.]com
Verifica phishing e sicurezza per walletchekaml.com
“AML Bot”
walletchekaml.com — Contenuto non disponibile (HTTP 502). Simulazione del marchio: AMLBot; Tipo di truffa: Aml Scam. Riepilogo delle prove: VirusTotal 3/94 (Fortinet, Gridinsoft, SOCRadar); URLQuery 1 alert; Spamhaus DBL_PHISH; PhishDestroy score 65/100. Registrar: Hello Internet.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of walletchekaml.com shows a deliberately crafted infrastructure aimed at abusing the AMLBot brand. The domain was registered on March 12, 2026 through Hello Internet Corp and is currently offline, indicating that the operators have taken the site down after detection. Technical examination reveals that the domain resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The hosting provider is Cloudflare, and the site employed Vue.js and HTTP/3, suggesting a modern web stack that could be used to host a convincing credential‑harvesting page.
No SSL certificate was observed for the domain, which is unusual for a site serving cryptocurrency‑related content and may have contributed to its rapid takedown. VirusTotal scans report that three of ninety‑four security vendors flagged the domain, providing additional independent confirmation of malicious intent. The site appears on a single security blocklist and has been blocked by the PhishDestroy service, reinforcing the consensus that the domain is associated with a crypto scam. The page title returned by the server is "AML Bot," directly matching the brand target listed in the intelligence, confirming the impersonation attempt.
While the exact content of the page was not captured, the combination of brand impersonation, the declared scam type (crypto scam), and the presence of detection alerts justify a high‑confidence classification as a malicious site. Defenders should immediately add the domain and its resolving IP address to deny‑list rules on perimeter firewalls and DNS filtering solutions. Continuous monitoring of the IP block for any new domains that resolve to the same Cloudflare address is advised, as threat actors often reuse infrastructure.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | walletchekaml.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 3 identified
Progressive JavaScript framework for building user interfaces.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of walletchekaml.com · checked Mar 12, 2026
Dati e relazioni esterne
PD-20260312-96BC3F Recipient: abuse@hello.co Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo