infinito-wallet[.]org

The domain infinito-wallet.org was found to be engaged in a brand impersonation phishing campaign, specifically targeting users of the Infinito Wallet cryptocurrency platform. The site, now taken offline, hosted a fraudulent page titled “Infinito Wallet — Universal Crypto Wallet for DeFi, NFTs & Web3” designed to steal credentials or crypto assets from unsuspecting visitors. This domain was registered through Web Commerce Communications Limited dba WebNic.cc on February 21, 2026, and resolved to IP address 172.67.188.85.

Technical analysis reveals that the domain was flagged by 9 out of 95 security vendors on VirusTotal, indicating moderate but significant detection across the security community. It appeared on one security blocklist and was issued an SSL certificate from WE1, which may have lent it a false sense of legitimacy. The elevated risk level is underscored by its recent creation date and the specific targeting of a well-known crypto wallet brand, making it a credible threat to users searching for Infinito Wallet services.

As of the latest intelligence, the domain has been taken offline, neutralizing the immediate threat. However, users who may have interacted with the site should take precautions: change any passwords entered on the page, enable two-factor authentication on their crypto accounts, and monitor their wallets for unauthorized transactions. PhishDestroy recommends verifying the authenticity of any crypto-related website by checking official sources directly and avoiding links from unsolicited communications. Always double-check the URL and look for established security indicators before entering sensitive information online.