check-trust[.]top

This domain, check-trust.top, operates as a fraudulent Anti-Money Laundering (AML) compliance portal designed to harvest financial credentials and personal identification details. Analysis indicates the page title 'Trust AML' mimics legitimate Know Your Customer (KYC) verification processes, a common tactic to deceive users into submitting sensitive information under false pretenses. The infrastructure targets individuals and organizations subject to regulatory compliance checks, exploiting trust in institutional verification procedures. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on May 04, 2026, through Global Domain Group LLC, with resolution to IP address 172.67.175.207. Security engines detected malicious activity in 10 out of 95 VirusTotal scans, while the domain appears on one security blocklist. Technologies identified include Cloudflare (including HTTP/3 and Browser Insights) and cdnjs, suggesting an attempt to mimic legitimate service infrastructure while obscuring origin servers. Users who visited check-trust.top should immediately revoke any submitted credentials and monitor associated financial accounts for unauthorized activity. System administrators should add the domain and IP 172.67.175.207 to network blocklists, while security teams should investigate potential credential exposure through corporate single sign-on systems. Given the domain's current offline status, organizations should remain vigilant for similar phishing infrastructure using 'AML' or 'Trust' branding in domain names, particularly those registered through bulk domain providers with recent creation dates.