aml-verifying[.]app

The domain aml-verifying.app is a confirmed phishing site engaged in brand impersonation targeting cryptocurrency users. It mimics the 'AML Scam' brand to deceive victims into disclosing sensitive information or transferring funds under false pretenses. This site does not employ a known drainer kit but is classified as an elevated-risk threat due to its cryptocurrency scam activity. As of the latest verification, aml-verifying.app has been taken offline.

Technical indicators confirm the malicious nature of aml-verifying.app. The domain is flagged by 2 of 95 security vendors on VirusTotal, including CRDF and Gridinsoft, and appears on 5 security blocklists such as PhishDestroy, ScamSniffer, and Polkadot. Registered through Dynadot LLC on February 21, 2026, the domain resolves to the IP address 216.126.229.16, hosted by aurologic GmbH in Germany. No SSL certificate is present, and the observed page title is identical to the domain name. Nameservers for the domain are lewis.ns.cloudflare.com and rafe.ns.cloudflare.com.

Individuals who interacted with aml-verifying.app should immediately revoke any token approvals granted to unknown or suspicious contracts and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and report any losses to relevant authorities or blockchain analytics services. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. Victims should also change passwords for any accounts accessed while the site was active and enable two-factor authentication where available.