trust-aml[.]cfd

The domain trust-aml.cfd poses an elevated risk as a generic phishing threat, designed to deceive users into revealing sensitive information. This domain was identified as part of a broader phishing campaign, though it does not impersonate a specific brand. Its current offline status suggests it may have been taken down after detection, but similar domains could appear.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports a detection rate of 2 out of 95 security vendors flagging this domain, confirming its suspicious nature. The domain was registered on March 29, 2026 through Global Domain Group LLC, a registrar associated with lower scrutiny. It resolves to IP 172.67.164.113, and its SSL certificate was issued by Let's Encrypt (E7), which is commonly used by both legitimate and malicious sites. The domain appears on 1 security blocklist, further corroborating its risk. The page title, 'Trust AML,' suggests it may have been masquerading as an anti-money laundering service to lure victims.

For users who may have encountered this domain, it is crucial to avoid entering any personal, financial, or login credentials. Since the site is now offline, any data previously submitted should be considered compromised. Change passwords on any accounts that may have been used, enable multi-factor authentication, and monitor financial statements for unauthorized activity. PhishDestroy advises always verifying URLs before interacting with unknown sites and reporting suspicious domains to security authorities.