# aml-checkup.org — SUSPICIOUS

> aml-checkup.org is a live AML scam phishing domain with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies an active brand-impersonation domain targeting AML Scam users. The domain aml-checkup.org (registered March 9, 2026 via Gname.com Pte. Ltd.) resolves to IP 188.114.96.3 and carries a Google Trust Services SSL certificate. No known drainer kit has been confirmed at this stage; the campaign is classified as brand_impersonation with risk status under_investigation.    Technical indicators confirm minimal detection: VirusTotal score of 0/95, no current blocklist entries in Google Safe Browsing (GSB), and creation date one day prior to analysis. The registrar Gname.com Pte. Ltd. has not been previously associated with AML-themed phishing, and the IP 188.114.96.3 shows no prior malicious reputation in open-source threat feeds. The SSL certificate issued by Google Trust Services adds superficial legitimacy, likely intended to bypass browser warnings.    This domain remains active and unblocked as of today. Immediate defensive actions include domain takedown requests to Gname.com and SSL revocation via Google Trust Services. Users should avoid visiting aml-checkup.org and report any encounters to their security teams. While current risk is assessed as under_investigation due to low detection rates, the active status and impersonation of a regulated compliance brand elevate potential impact. Continued monitoring is required until full attribution and remediation are achieved.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: AML Scam

## Domain Intelligence
- Registered: 2026-03-09 15:25:19
- Registrar: Gname.com Pte. Ltd.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a867aa9a-9961-42f4-aabd-f1bf2a6301d0
- PhishDestroy: https://phishdestroy.io/domain/aml-checkup.org/
- LLM endpoint: https://phishdestroy.io/domain/aml-checkup.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aml-checkup.org/
Last updated: 2026-03-28