botscan-aml[.]com

This domain poses an elevated risk as a brand impersonation threat, specifically targeting the AMLBot crypto compliance platform. PhishDestroy identified that the site was designed to deceive users into believing they were on the legitimate AMLBot service, likely to harvest credentials or crypto assets through a drainer mechanism. The domain has since been taken offline, but its infrastructure remains a concern.

Security intelligence reveals several red flags: the domain was created on March 9, 2026, and registered through Global Domain Group LLC. It resolved to IP address 144.172.117.18 and used a Let's Encrypt SSL certificate (E8), which is common among fraudulent sites. VirusTotal flagged it as malicious with 5 out of 95 security vendors marking it as dangerous, and it appeared on one security blocklist. These indicators confirm the site was crafted for brand impersonation with the likely goal of draining crypto wallets or stealing login credentials.

To stay safe, users should always verify URLs by checking the official AMLBot website directly, never clicking on links from unsolicited messages. Enable two-factor authentication on all crypto accounts and use a hardware wallet for transactions. If you entered any information on botscan-aml.com, immediately change your passwords and contact AMLBot support. Report similar domains to cybersecurity authorities to help take down future threats.