amlcheck[.]team

Analysis date July 24 2026. The domain amlcheck.team is currently offline, having been taken offline according to the intelligence feed. The domain was registered on February 21 2026 through HOSTINGER operations, UAB. It resolves to IP 2.19.225.3, which belongs to AS16625 Akamai Technologies, Inc. located in Germany. No SSL certificate is presented, indicating unencrypted HTTP service.

The page title observed when the site was live was "Electronics, Cars, Fashion, Collectibles & More | eBay", suggesting an attempt to impersonate eBay's marketplace. The intelligence classifies the activity as a crypto scam, and the threat type is generic phishing. The domain appears on a single security blocklist and is specifically blocked by PhishDestroy. VirusTotal analysis shows the URL was submitted to 95 scanning engines, none of which returned a detection at the time of scanning; this absence of detections does not constitute a safety assurance. No additional evidence such as Safe Browsing or Open Threat Exchange entries were found.

Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for 2.19.225.3, and consider adding the IP to reputation lists. Because the site is offline, any active phishing campaign would likely have shifted to a new infrastructure, so threat hunting should include indicators of compromise related to eBay credential harvesting and crypto‑related fund transfers. Ongoing observation of the registrar HOSTINGER and the hosting ASN is recommended in case the actor re‑registers a similar domain. Until further activity is observed, the domain remains under investigation.