# aml-check24.com — SUSPICIOUS

> aml-check24.com impersonates AML Scam with phishing lures. Flagged by 1 of 95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies aml-check24.com as an active brand impersonation domain. This site currently masquerades as AML Scam, a known anti-money laundering verification portal, by cloning its branding, layout, and service claims to deceive users seeking legitimate compliance tools. The threat is classified as elevated due to direct impersonation intent and active hosting.

This domain was flagged by 1 of 95 VirusTotal security vendors within 24 hours of detection. It resolves to IP address 88.222.222.47 and is registered through Hosting Concepts B.V. d/b/a Registrar.eu. The domain was created on December 22, 2025, and secured with a Let's Encrypt SSL certificate. Early telemetry indicates zero listings on major blocklists, resulting in low trust scores and high uncertainty across threat intelligence feeds.

aml-check24.com remains active and poses an immediate risk of credential harvesting, financial data theft, or malware delivery under the guise of AML verification services. Users are strongly advised not to interact with the site or submit any data. Organizations should block the domain and IP at network perimeter and DNS levels. Report all observed activity to your security team and appropriate threat intelligence platforms. Consider user awareness training highlighting the risk of fraudulent AML compliance sites, especially those using newly registered domains mimicking regulated services.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: AML Scam

## Domain Intelligence
- Registered: 2025-12-22 10:52:35
- Registrar: Hosting Concepts B.V. d/b/a Registrar.eu
- IP: 88.222.222.47

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ae69a462-4bba-4d54-890c-d6569436edee
- PhishDestroy: https://phishdestroy.io/domain/aml-check24.com/
- LLM endpoint: https://phishdestroy.io/domain/aml-check24.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aml-check24.com/
Last updated: 2026-03-28