aml-scan[.]top

The domain aml-scan.top is a confirmed phishing site engaged in brand impersonation targeting cryptocurrency users. It falsely presents itself as a legitimate 'AML Scam' service under the guise of a 'Free Crypto AML Checker', aiming to deceive victims into disclosing sensitive information or transferring digital assets. No drainer kit was identified, but the site operates as a cryptocurrency scam. As of the latest verification, aml-scan.top has been taken offline.

Technical indicators reveal limited but notable detection: 1 of 95 VirusTotal security vendors flagged aml-scan.top, while Google Safe Browsing has not yet classified it as unsafe. The domain appears on one security blocklist, PhishDestroy. Registered on February 21, 2026, aml-scan.top resolves to the IP address 104.21.83.144, hosted on Cloudflare infrastructure in the US. The SSL certificate is issued by WE1, and the observed page title was 'AML Sector | Free Crypto AML Checker'.

Users who interacted with aml-scan.top should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Enable two-factor authentication on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.