aml-check24[.]com

PhishDestroy identifies aml-check24.com as an active brand impersonation domain. This site currently masquerades as AML Scam, a known anti-money laundering verification portal, by cloning its branding, layout, and service claims to deceive users seeking legitimate compliance tools. The threat is classified as elevated due to direct impersonation intent and active hosting.

This domain was flagged by 1 of 95 VirusTotal security vendors within 24 hours of detection. It resolves to IP address 88.222.222.47 and is registered through Hosting Concepts B.V. d/b/a Registrar.eu. The domain was created on December 22, 2025, and secured with a Let's Encrypt SSL certificate. Early telemetry indicates zero listings on major blocklists, resulting in low trust scores and high uncertainty across threat intelligence feeds.

aml-check24.com remains active and poses an immediate risk of credential harvesting, financial data theft, or malware delivery under the guise of AML verification services. Users are strongly advised not to interact with the site or submit any data. Organizations should block the domain and IP at network perimeter and DNS levels. Report all observed activity to your security team and appropriate threat intelligence platforms. Consider user awareness training highlighting the risk of fraudulent AML compliance sites, especially those using newly registered domains mimicking regulated services.