aml-checker[.]co

The domain aml-checker.co is a confirmed phishing site engaged in brand impersonation targeting cryptocurrency users. It poses as 'AML Scam', a fraudulent service designed to deceive victims into believing they are interacting with a legitimate anti-money laundering verification platform. The site was operational as a cryptocurrency scam but is currently taken offline.

Technical indicators confirm the malicious nature of aml-checker.co. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through Web Commerce Communications Limited on February 21, 2026, and resolves to the IP address 104.21.88.114, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was issued for the domain, and its nameservers are grannbo.ns.cloudflare.com and javier.ns.cloudflare.com. The observed page title was 'Aml', and it returned an HTTP 200 status during active operation.

Individuals who interacted with aml-checker.co should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new cryptocurrency wallet. Monitor transaction history for unauthorized activity and report the domain to relevant platforms, including cryptocurrency exchanges, blockchain explorers, and anti-phishing organizations such as PhishTank or the Anti-Phishing Working Group. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication where available.