Is okamls.pro a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at okamls.pro presents itself as a Web3 transaction-security and anti-money-laundering service. Its homepage is titled around "AMLConnect and AMLBot: Securing Web3 Transactions Effectively" and consists of a single long marketing page about screening crypto transactions. The apparent purpose is to attract users and businesses who want compliance or risk screening for blockchain transactions. The domain itself is not visibly tied to either of the named products.

Scam/Impersonation Risk

This is the decisive area of the assessment. Multiple independent security engines currently flag the domain as malicious or suspicious, including a major tier-one network security vendor. The domain also carries a confirmed external blacklisting, so the site should be treated as blacklisted and as a high-risk destination for any sensitive interaction. Nothing in the available evidence shows what the detections relate to, so the nature of the threat (phishing, malware or another abuse type) cannot be specified. The domain was registered only a few months ago and has almost no independent history, which gives it no track record to set against the detections. The homepage trades on the names of two recognizable compliance brands. A service that screens transactions invites visitors to submit wallet addresses, transaction details or account credentials. That is the kind of positioning that makes a blacklisted, newly registered domain especially hazardous. No conflicting legal-entity names were observed, and no direct brand-impersonation or phishing-kit finding was confirmed. Behavioral testing also did not observe wallet-drainer activity, clipboard manipulation, hidden forms, cloaking or credential posts to third-party hosts. These clean behavioral results do not offset the threat-intelligence detections. Evidence:

• Homepage: external reputation sources return malicious and suspicious detections, including from a tier-one vendor, plus a confirmed blacklist hit.
• Domain registered 2026-06-08 (~0.38 years old, about four and a half months).
• Web archive holds 1 snapshot (2026-07-22, 1 year tracked), so there is effectively no historical continuity.
• Homepage behavioral runs: 18 browser console errors across 3 sandbox runs, with no cloaking, wallet-drainer or clipboard-hijack behavior observed.

Regulatory Verification Notes

The homepage carries no clear, verifiable disclosure of a licensed operator, registered company or regulatory authorization. That is a significant gap for a site offering compliance-related services in a sector where such credentials matter. The gap is a verification shortfall rather than proof of wrongdoing, but here it compounds the reputational problem instead of mitigating it. Registration details are incomplete or obscured, which amounts to ownership opacity. This is an administrative limitation and not an identity contradiction. No third-party broker or regulator listing matched the domain, so no external regulatory signal supports the site's standing either way. Evidence:

• Homepage: no named legal entity, licence or registration number is identified.
• Domain registered through GNAME.COM PTE. LTD., with owner details hidden or incomplete.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-02. Domain-validated encryption confirms the connection is encrypted, not who operates the site.

What to Verify Next

The named brands should be asked, through channels found independently of this site, whether okamls.pro is an authorized domain, partner or reseller. Any operating company, licence or registration claimed on the site should be checked against the relevant public registry. The official support and contact channels should also be confirmed through an offline or independently sourced route. The domain's reputation status should be re-checked after any documented remediation, since a clean re-evaluation would be a precondition for revisiting this assessment. Evidence:

• Homepage: the site names third-party products in its headline but offers no verifiable proof of affiliation.
• Registration data: the domain's operator cannot be tied to a named entity.
• Reputation data: the detections are current and unresolved at the time of analysis.

Summary Verdict

The available evidence supports a high-risk, clearly cautionary posture. Confirmed external threat detections combine with a very young domain, no meaningful history and unestablished operator identity. Technical hygiene is adequate but does not offset the reputational findings. Legitimacy cannot be inferred from the site's content or presentation.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are edge servers. The origin host is not observable, so independent hosting verification is not possible. The same edge-only visibility can also mask rapid content changes. Protective infrastructure is a mitigating factor only. It does not establish legitimacy and cannot offset the detections above.

Closing Assessment

At most, the site should be viewed read-only. Credentials, wallet connections, transaction data and payments should not be submitted to it. Anyone who has already interacted with it should rotate affected credentials and review wallet permissions. Dealings with the brands it names should go through their officially published channels.