trust[.]amlchek[.]cash

Analysis of trust.amlchek.cash indicates an active crypto scam domain registered on February 21, 2026, through Tucows Domains Inc. The domain resolves to IP 104.21.32.1 (AS13335 Cloudflare, Inc., US) and uses nameservers ns1.renewyourname.net and ns2.renewyourname.net. The SSL certificate is issued by WE1, and the site returns an HTTP 200 status with the page title 'Just a moment...', a common Cloudflare interstitial response. As of July 12, 2026, the domain appears on one security blocklist, and two of 93 security vendors on VirusTotal flag it as malicious. The scam type is explicitly classified as a crypto scam, though the exact mechanics—such as whether it functions as a phishing page, fake exchange, or wallet drainer—remain unconfirmed due to limited content analysis. Infrastructure analysis reveals Cloudflare hosting, which is frequently used to obscure origin servers and evade takedowns. Defenders should treat this domain as high-risk and consider blocking it at the DNS or proxy level. Further investigation is recommended to determine if additional related domains or IP addresses are involved in the same campaign.