aml-chek[.]site

aml-chek.site has been identified by PhishDestroy as an active crypto drainer phishing domain designed to trick users into connecting their cryptocurrency wallets under the false pretense of an Anti-Money Laundering (AML) verification tool. The site mimics legitimate compliance services to lure victims into approving malicious wallet transactions that drain funds without consent. Users who interact with this domain risk irreversible financial loss as the drainer leverages smart contract approvals to withdraw tokens directly from connected wallets. This domain is currently under active investigation with a status marked as active by threat intelligence systems.

PhishDestroy has compiled critical evidence confirming the malicious nature of aml-chek.site. The domain resolves to IP address 172.67.216.45 and is associated with a Let's Encrypt SSL certificate, which may be used to appear more trustworthy. Notably, VirusTotal currently reports zero detections out of 95 antivirus engines, indicating it has not yet been widely flagged despite its active phishing operation. The domain was registered on April 25, 2026, through Global Domain Group LLC, a relatively recent registration that correlates with the emergence of this campaign. While specific blocklist counts are not provided, the absence of detections on major platforms underscores the importance of proactive verification to prevent exposure.

If you have visited aml-chek.site, disconnect your cryptocurrency wallet immediately and revoke any token approvals or smart contract permissions granted through the site. Use a reputable blockchain explorer or wallet tool to review active approvals and remove unauthorized access points. Report the domain to PhishDestroy and relevant cybersecurity authorities to aid in broader threat intelligence. Avoid re-engaging with the site and share this advisory with others who may have encountered it. Always verify the legitimacy of financial or compliance-related websites by cross-referencing official sources and using trusted security tools before entering sensitive information or connecting wallets.