Security Scan Report: amlscores.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 9 domains to perform 27 HTTP transactions. The main domain is amlscores.com and was registered 5 months ago.

Submitted URL: https://amlscores.com

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Domain carries a multi-feed 'clearfake (malware)' report and the page fires a CRITICAL EtherHiding exfil IDS alert while offering 14+ wallet connections — do not connect a wallet; no forms present, but treat as high risk.

Risk Factors (3)
Primary domain flagged as fake/malware by two corroborating threat-intel feeds
CRITICAL IDS malware alert for EtherHiding exfiltration on the same page
Wallet-connection buttons combined with blockchain RPC traffic on a domain with no established reputation
Domain age information unavailable

Details

Page Title

AMLScores - Free Multi-Chain AML Wallet Checker | TRON, EVM, Solana, Sui, XRP

Scan Type

public

Domain Name Analysis

You're looking at domain 'amlscores.com' on the commercial generic top-level domain (.com) with no subdomain. The second-level label 'amlscores' is 9 characters long holding three vowels versus 6 consonants. Word splitting yields 3 words: a, ml, scores. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

iJ) AMLScores Scan Wallet Networks @ TRON A A As sur A+ xR matters Scan any wallet across TRON, EVM, Solana, Sui or XRP and get a real-time AML risk score. Sanctions, darknet exposure, mixer act...

Page Load Overview

10.35s
Total Load Time
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:28,339 chars
Detector Agreement:80%

Website Classification

Primary Category

cryptocurrency blockchain96% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
96%
finance banking
94%
technology software
85%
education learning
75%
documentation technical
57%

Detected Features

Products
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.95Google · CDNUnited States
AS15169Google LLC
2146.75.120.159Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
2142.251.110.119Google · CDNUnited States
AS15169Google LLC
276.76.21.21Aws · CLOUDWalnut, California, United States
AS16509Amazon.com, Inc.
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
252.51.98.124Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2104.18.37.127Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2712--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10505CF32524A2BD3941F05F895021B093D99914BCEA962DD7E9DC6CC8FEFFAACD13424

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:0SsXUJYFd5LQKbUJfM3iDc+xSL/oXUJ1F4:Rs49KEGr+SLo4o

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:839231:GCjG5PyE2EEIEpEgpSFhSHEqAAzBEQKiFZUCUSFiQQsQAYQHCSGIBAJgGNwCEhqWAKii5CcY/HDSiOzxCZECEiAuIUpDgpDi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000000c6e0000
Perceptual Hash:92fcac9384ec939c
Difference Hash:941919d9d9dc27e5
Wavelet Hash:ff018d6d0d6f011d
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data