aml-trust[.]net

The domain aml-trust.net is currently identified as a high-risk source of generic phishing activity, specifically targeting user credentials. As of the latest analysis, this domain remains active and operational. There is no evidence of a specific brand impersonation, but the threat type indicates a broad phishing campaign designed to deceive users and harvest sensitive information.

Technical examination reveals aml-trust.net was registered on May 04, 2026, through TUCOWS.COM, CO. The domain utilizes a Let's Encrypt SSL certificate, which may foster a false sense of legitimacy among potential victims. Hosting resolves to IP address 185.38.148.238. On VirusTotal, 3 out of 95 security vendors have flagged this domain as malicious. The relatively low blocklist count, compared to the high risk assessment, may indicate that the campaign is newly launched or evolving, making timely detection and response critical.

The domain remains active at this time, posing an ongoing risk to users. Organizations and individuals are advised to implement proactive blocking of aml-trust.net at the network level, monitor for related indicators of compromise, and educate users about the threat. Security teams should update detection mechanisms with this domain and associated infrastructure to reduce exposure to credential theft and subsequent exploitation.