my-aml[.]org

This domain, my-aml.org, was registered on February 21 2026 through Porkbun LLC and currently resolves to the Amazon‑owned address 99.83.231.61 in the United States (AS16509). The authoritative nameservers are maceio.ns.porkbun.com, curitiba.ns.porkbun.com, and salvador.ns.porkbun.com. A valid Let’s Encrypt certificate (E8) is present and the site serves HTTP 200 responses with HSTS enabled. Automated analysis detects a Node.js stack built with React, Next.js, Netlify and Webpack. Gridinsoft assigns a trust score of 0 / 100 and the domain appears on three public blocklists; it is blocked by PhishDestroy, MetaMask and SEAL. VirusTotal reports four of ninety‑three scanners flagging the host as malicious, and AlienVault OTX lists one pulse referencing the same indicator. The page title “AML Verification of Crypto Wallets” aligns with a reported crypto‑wallet verification scam, confirming the classification as a high‑risk crypto phishing campaign. No additional content has been publicly disclosed, so the exact credential‑capture mechanisms remain unknown. Defenders should immediately block the domain and its resolved IP, update intrusion‑detection signatures to match the observed technology fingerprint, and warn users against any unsolicited AML‑verification requests that reference cryptocurrency wallets.