security-amlcheck[.]help

This report details a technical threat assessment for the domain security-amlcheck.help. The site impersonates the brand "AML Scam" and is categorized as a cryptocurrency scam. The threat posed is that the site is designed to deceive users into believing it is a legitimate anti-money laundering check service for cryptocurrency transactions, likely to steal funds or credentials during the verification process.

Technical evidence indicates the site was created on 2026-02-21 and hosted on IP address 172.67.156.125 in the United States, associated with AS13335 Cloudflare, Inc. VirusTotal analysis shows 7 out of 95 vendors flagged the domain as malicious, including alphaMountain.ai, CRDF, CyRadar, Fortinet, and Gridinsoft. The site uses SSL certificate type WE1 and is listed on 1 blocklist. The GridinSoft trust rating is 0 out of 100, and the DOM risk score is 68.

The domain is currently DOWN/OFFLINE, indicating the site is not accessible. Based on the high detection rate by multiple security vendors, low trust score, and elevated DOM risk score, the threat level is considered high. Users should avoid any interaction with this domain.