# infocrypt.vip — SUSPICIOUS

> PhishDestroy identifies infocrypt.vip as a NEW crypto-phishing domain registered June 11, 2025, that already evades 95 security engines.

## Summary
PhishDestroy identifies infocrypt.vip as an active generic-phishing domain currently under investigation. The site mimics legitimate cryptocurrency services to harvest wallet credentials and seed phrases. Users should treat any login prompts on this domain as hostile and refrain from entering sensitive information.

This domain was flagged by Google Safe Browsing under SOCIAL_ENGINEERING and is already blocked by InversionDNS. VirusTotal shows 0 detections out of 95 engines despite the active campaign. The domain resolves to IP 172.67.195.43, was registered on June 11, 2025 through Gname.com Pte. Ltd., and carries a Google Trust Services SSL certificate. It has also been listed on one security blocklist.

Mitigation is straightforward: block inbound and outbound traffic to infocrypt.vip and 172.67.195.43 at the firewall. Users who may have visited the site should immediately revoke any wallet credentials entered, transfer assets to a new wallet, and scan local devices for infostealers. Organizations should add the domain and IP to their threat intelligence feeds and warn employees against interacting with crypto-related login prompts originating from unknown domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-11 06:48:04
- Registrar: Gname.com Pte. Ltd.
- IP: 172.67.195.43

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["InversionDNS"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/infocrypt.vip
- PhishDestroy: https://phishdestroy.io/domain/infocrypt.vip/
- LLM endpoint: https://phishdestroy.io/domain/infocrypt.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/infocrypt.vip/
Last updated: 2026-04-03