amlcryptobot[.]io

amlcryptobot.io is a phishing domain that engaged in brand impersonation, specifically targeting LinkedIn users with a cryptocurrency scam. The website was designed to appear as a legitimate service, using the page title 'AML Crypto Checker - Comprehensive Crypto Compliance Solution | AMLBot', but was in fact fraudulent. As of the most recent assessment, amlcryptobot.io has been taken offline and is no longer accessible.

Technical analysis shows that amlcryptobot.io was created on February 21, 2026, and resolved to the IP address 104.21.80.1, hosted in the US under AS13335 Cloudflare, Inc. The site used an SSL certificate issued by Cloudflare TLS Issuing ECC CA 1. VirusTotal reports that 1 of 95 security vendors, including Gridinsoft, detected malicious activity associated with this domain. The domain appears on four security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Google Safe Browsing has not flagged the domain. The Gridinsoft trust score for amlcryptobot.io is 0/100.

Anyone who interacted with amlcryptobot.io, particularly those who entered LinkedIn credentials or cryptocurrency wallet information, should immediately change all related passwords, enable two-factor authentication, and monitor accounts for unauthorized activity. If cryptocurrency wallet access was granted, users should revoke any token approvals and transfer assets to a new secure wallet. It is recommended to report phishing attempts to relevant authorities and the impersonated brand to help prevent further scams.