Is botamls.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, botamls.pro, presents itself under the title "AMLConnect and AMLBot: Securing Web3 Transactions Effectively." It positions itself as an anti-money-laundering and transaction-screening service for the Web3 and crypto sector. A visitor sees a single landing page of substantial text that promotes compliance and transaction-security tooling for digital-asset activity. Its apparent purpose is to offer or front a crypto-compliance product, which makes it a context where visitors are likely to trust the site and disclose sensitive information.

Scam/Impersonation Risk

Material contradictory signals are present, and they drive the cautionary posture of this assessment. The site is confirmed as blacklisted: several independent security engines currently flag the domain as malicious or suspicious, and one major security vendor in that set is among the most widely relied upon. Protective hosting does not offset this reputational finding. The page also borrows the names AMLConnect and AMLBot in its headline and positions itself in a compliance-trust niche. No independent evidence ties this domain to the operator of those names, so the branding should be treated as an unverified claim and a possible brand-borrowing lure. Behavioral testing of the homepage found no wallet-connection prompts, no drainer behavior, no clipboard manipulation, no hidden forms, and no cloaking. This does not reduce the risk, because the listing evidence is decisive and the domain is very young. The page produced a high volume of script errors, and two of its three external background requests went to destinations outside the standard trusted set. That points to unstable or poorly maintained page code. Evidence:

• Homepage: the headline names AMLConnect and AMLBot while the domain is unrelated to either name, and nothing on the page establishes an affiliation.
• Reputation checks: five engines rated the domain malicious and one suspicious, including a tier-one security vendor, and an external blacklist is active.
• Domain provenance: registered 2026-07-15 (~0.28 years old), only about three months before assessment.
• Archive depth: 1 archive snapshot, dated 2026-08-31, covering 1 year tracked, so there is no meaningful independent history.
• Homepage behavior: 19 console errors were recorded, and 2 of 3 external background requests went to non-whitelisted destinations.

Regulatory Verification Notes

The captured evidence does not establish who operates the site, and no licensing or registration credential could be tied to it. For a business that sells compliance and AML services, that gap is significant, since credibility in this field rests on a named, accountable entity. Domain registration details are incomplete, which amounts to ownership opacity. That is an administrative limitation and not by itself an identity contradiction, and no conflicting legal entities were observed. No third-party broker or regulator-style reputation entry exists for the site. The regulatory picture therefore offers no mitigation of the threat-intelligence findings above. Evidence:

• Registration: the registrar is GNAME.COM PTE. LTD., and the registration runs to 2027-07-15.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: a DV TLS certificate issued by WE1 and valid to 2026-12-11 (46 days remaining). It confirms an encrypted connection only, not the operator's identity.
• Homepage: no named legal entity, license number, or regulator reference was identified in the captured page content.

What to Verify Next

Any relationship with AMLBot or AMLConnect should be confirmed only through the official channels of those brands, reached independently of this site. The point is to establish whether this domain is an authorized property or a lookalike. The domain should also be checked against the registries of the jurisdictions where the operator claims to serve clients. The question is whether any named entity holds a license or registration for AML, virtual-asset, or compliance services. No wallet, API key, or business data should be provided in the meantime. Any contact channels or onboarding requests received from this domain should be validated through a separate, offline route. Evidence:

• Homepage: the AMLConnect and AMLBot branding is the main claim needing independent confirmation.
• Security-vendor listings: the active malicious ratings should be re-checked later, since a cleared status would be needed to revisit this posture.
• Registration record: the domain's recent creation date means any claimed business history cannot be corroborated from the domain itself.

Summary Verdict

The overall assessment is a critical, high-risk trust posture. Confirmed adverse reputation findings, a very young domain, and an unverified operator behind borrowed brand names outweigh the technically orderly and encrypted presentation. The site is not regarded as suitable for sensitive interaction under current evidence.

Infrastructure Integrity

The site is fronted by Cloudflare, a mainstream CDN and WAF provider. All observed addresses are edge servers, and the origin hosting is not visible. This is a mitigating factor only, because it reflects commodity protection that malicious sites also use and says nothing about the operator's legitimacy. Edge-only visibility also prevents independent verification of the true hosting. It can allow page content to be swapped rapidly without a change in network footprint, which further limits the reassurance the infrastructure provides.

Closing Assessment

Interaction beyond passive, read-only viewing should be avoided. This means no account login, no entry of credentials, no wallet connection, and no payment or financial transaction. Any outreach that refers to this domain should be handled as untrusted until the operator is independently identified and the adverse listings are cleared.