# chek-aml.com — SUSPICIOUS

> Chek-aml.com poses as AMLBot in a low-risk brand impersonation attempt. Learn about its takedown and related security flags here.

## Summary
PhishDestroy has identified chek-aml.com as a domain engaged in brand impersonation targeting AMLBot. Classified as a low-risk threat, this domain attempts to mimic the AMLBot brand to deceive users. It carries the page title 'AML Bot' and is intended to confuse visitors by leveraging a similar name.

Technical indicators reveal that chek-aml.com was registered on March 6, 2026, via NiceNIC International Group Co., Limited. The domain resolved to the IP address 104.21.48.241 and appeared on one security blocklist. VirusTotal flagged the domain in 2 out of 95 security vendor scans, indicating minimal detection. These data points suggest limited but notable malicious infrastructure associated with the domain.

Currently, chek-aml.com is offline, reflecting effective mitigation efforts. PhishDestroy continues to monitor related threats and encourages vigilance against emerging brand impersonation schemes. Users and organizations should remain cautious of similar domains attempting to exploit AMLBot’s reputation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Scam type: AML Scam
- Target brand: AMLBot
- Page title: AML Bot

## Domain Intelligence
- Registered: 2026-03-06 15:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.48.241
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: lisa.ns.cloudflare.com nico.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Ermes", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/rRn6GGFC/f30c524e3603.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/chek-aml.com
- Wayback Machine: https://web.archive.org/web/https://chek-aml.com
- PhishDestroy: https://phishdestroy.io/domain/chek-aml.com/
- LLM endpoint: https://phishdestroy.io/domain/chek-aml.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chek-aml.com/
Last updated: 2026-03-19