amlife[.]info

This domain, amlife.info, is currently active and rated high risk. It is classified as a generic phishing operation with a cryptocurrency scam focus. The site returns HTTP 200 and presents the page title "INICIO," which offers no further context about the content.

Infrastructure analysis shows the hostname resolves to 209.192.137.208, an address assigned to AS7979 (Servers.com, Inc.) located in the United States. The domain is delegated to four Pananames nameservers (ns1‑ns4.pananames.com). Registration was performed through URL Solutions, Inc., and the site presents a valid Let’s Encrypt R12 certificate.

Reputation services indicate a Gridinsoft trust score of 0 out of 100, and two out of ninety‑five VirusTotal scanners have flagged the domain. It appears on a single security blocklist and has been explicitly blocked by PhishDestroy. The combination of a low trust score, partial vendor detection, and blocklist presence reinforces the high‑risk assessment.

Available intelligence does not include a detailed content analysis, so the exact phishing content, credential capture mechanisms, or specific cryptocurrency service being abused remain unknown. No brand name is referenced in the provided data, and the page content has not been examined, limiting attribution beyond the generic cryptocurrency theme.

Defenders should immediately add amlife.info to DNS and network deny lists, and consider blocking the associated IP address 209.192.137.208. Monitoring for TLS certificates issued by Let’s Encrypt for this domain can help identify rapid re‑registration attempts. Correlation of outbound traffic to this host with user authentication events may reveal compromised accounts. Continuous ingestion of updated blocklists and threat‑intel feeds is recommended to capture any derivative domains that reuse the same nameserver set or IP range.