amlsafe[.]info

Analysis of the domain amlsafe.info, conducted on July 24, 2026, indicates it was actively involved in a crypto scam phishing campaign. The domain resolved to the IP address 198.18.2.178 at the time of assessment, though no hosting provider or autonomous system details have been confirmed. Infrastructure analysis reveals the absence of an SSL certificate, which increases the risk of unencrypted data interception for any visitors. The domain's nameservers remain undetermined, limiting visibility into its DNS management.

Detection data shows that amlsafe.info was flagged by one security vendor on the PhishDestroy blocklist, aligning with its classification as a crypto scam. Gridinsoft assigned the domain a trust score of 0 out of 100, further corroborating its malicious status. One of 95 security vendors on VirusTotal identified the domain as malicious, though the limited detection count suggests it may have been a newer or less widely distributed threat at the time of scanning. The page title, 'www.amlsafe.info,' does not provide conclusive evidence of a targeted brand or service, though the 'crypto scam' classification indicates financial fraud intent.

No registration details, such as registrar or creation date, were available for this domain, restricting attribution efforts. Defenders should treat amlsafe.info as a confirmed phishing threat, particularly for users engaging with cryptocurrency-related services. Network-level blocking of the IP 198.18.2.178 and monitoring for related domains with similar naming patterns is recommended. Given its current offline status, the domain may have been taken down by authorities or the threat actor, but vigilance remains necessary for potential resurgence under altered infrastructure.