reportaml[.]app

PhishDestroy identifies reportaml.app as a domain engaged in brand impersonation, specifically targeting AMLBot, a crypto compliance solution, by masquerading as the legitimate entity to potentially deceive users.

This domain was flagged due to several technical indicators, including a VirusTotal score of 3/95, indicating that a small fraction of security vendors have flagged it, and it is registered through Tucows Domains Inc., resolving to the IP address 64.29.17.1, with a creation date of February 21, 2026, and currently appearing on 4 security blocklists.

Given its current offline status, reportaml.app no longer poses an immediate threat, but the fact that it was able to impersonate AMLBot and evade detection by most security vendors for a period raises concerns about the lingering risk of similar domains, emphasizing the need for continued vigilance and the use of up-to-date security tools to protect against brand impersonation threats.