aml-wallet-search[.]com
“AML Check”
aml-wallet-search.com — 内容不可用. 品牌冒充:Csgo; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 11/93 (ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. 注册商: Metaregistrar BV.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain aml-wallet-search.com was registered on February 21, 2026 through Metaregistrar BV and is hosted on Cloudflare’s network (AS13335) with the IP address 104.21.30.223 located in the United States. The site’s DNS is served by lisa.ns.cloudflare.com and sonny.ns.cloudflare.com, and it does not present an SSL/TLS certificate, exposing any traffic to clear‑text interception. The page title returned by the server is “AML Check,” and the infrastructure is classified as a crypto‑related scam that impersonates the brand csgo.
VirusTotal analysis shows that 11 out of 93 security vendors have flagged the domain, indicating a moderate level of consensus among scanners. It appears on a single security blocklist and is actively blocked by PhishDestroy, suggesting that some defensive feeds have already incorporated the indicator. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.
The domain’s current status is offline, but the historical evidence remains relevant for threat hunting. Defenders should add the domain and its resolving IP to block lists, monitor for any resurfacing activity, and correlate any outbound connections to the IP with known malicious patterns. Continuous re‑inspection of the host’s certificate status and DNS records is advised, as Cloudflare‑based phishing sites can reappear under new subdomains.
安全信号
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
取证情报
VirusTotal 分析
证据与外部报告
“This fake website is a phishing site, which is basically works as impersonating pseudo-AML crypto service. It tricks users into connecting wallets and signing malicious requests, leading to theft of their cryptocurrency. Many people already lost their money. Please, this scam website has to be stopped asap!”
PD-20260120-A965A9 Recipient: abuse@metaregistrar.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。