aml-checkers[.]app

The domain aml-checkers.app is a phishing site engaged in brand impersonation targeting cryptocurrency users. It mimics the legitimate AML Scam service, presenting itself as a 'Comprehensive Crypto Compliance Solution' to deceive victims into disclosing sensitive information or transferring funds under false pretenses. As of the latest verification, aml-checkers.app has been taken offline, though it previously posed an elevated risk due to its fraudulent representation of a trusted brand.

Technical indicators confirm the malicious nature of aml-checkers.app. The domain was registered through Dynadot LLC on February 21, 2026, and resolved to the IP address 216.126.229.16, hosted by aurologic GmbH in Germany. It appeared on 1 security blocklist (PhishDestroy) and was flagged by 2 of 95 VirusTotal vendors, including CRDF and Gridinsoft. The site lacked an SSL certificate, and its nameservers were lewis.ns.cloudflare.com and rafe.ns.cloudflare.com. The observed page title, 'AMLBot - Comprehensive Crypto Compliance Solution | Free AML Crypto Check,' further aligns with its impersonation of AML Scam.

Users who interacted with aml-checkers.app should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand’s official fraud reporting channels to aid in mitigation efforts.