analyzer-aml[.]com

analyzer-aml.com is a domain associated with a generic phishing scam targeting cryptocurrency users. The site aimed to deceive victims without impersonating any specific brand or using a known drainer kit. Currently, analyzer-aml.com has been taken offline, reducing the immediate risk of exposure to this phishing threat. This domain is not safe and was actively used in fraudulent attempts to compromise cryptocurrency assets.

Technical analysis reveals that analyzer-aml.com was created on February 21, 2026, and is registered through Dynadot LLC. It resolved to the IP address 172.86.69.234 located in Germany (AS14956 RouterHosting LLC). The domain appeared on one security blocklist, PhishDestroy, reflecting its malicious nature. VirusTotal scans indicated detections by 2 of 95 security vendors (including CRDF and Gridinsoft). The domain did not have an SSL certificate and displayed the page title 'analyzer-aml.com'. Nameservers used were ns1.dyna-ns.net and ns2.dyna-ns.net. Google Safe Browsing has not flagged this domain.

Users encountering analyzer-aml.com or similar phishing sites targeting cryptocurrency should revoke any token approvals granted during interactions with the site and transfer funds to a secure new wallet. Even though the site is offline, monitoring financial accounts for unauthorized activity is advised. To report suspicious emails or websites related to this scam, users can contact their local cybercrime authorities or use platforms dedicated to phishing report submissions. Changing passwords and enabling multifactor authentication on cryptocurrency exchange accounts can provide additional security against related threats.