infinite-money-glitch[.]entry-cryptolist[.]app

The domain infinite-money-glitch.entry-cryptolist.app is currently active and classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IP address 188.114.97.3. No nameserver records were returned, indicating potential DNS manipulation or a short‑lived hosting configuration. VirusTotal has recorded 13 detections out of 91 scanned security vendors, suggesting moderate malicious confidence across multiple scanning engines. The domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing its reputation as a malicious resource.

Publicly available intelligence does not include registrar details, SSL/TLS certificate information, HTTP response codes, or page title content, leaving those vectors unverified at this time. Consequently, analysts cannot confirm whether the site presents a credential‑harvesting login page or embeds additional payloads. The lack of nameserver data and the presence of a single blocklist entry suggest a relatively new or low‑profile campaign that relies on rapid deployment rather than extensive infrastructure.

Defenders should add 188.114.97.3 and the domain itself to network‑level deny lists, enforce DNS sinkholing where possible, and monitor outbound traffic for connections to the address. Continuous re‑scanning on multi‑engine platforms such as VirusTotal is recommended to capture any evolution in detection rates. Organizations employing email filtering should ensure that any messages referencing the domain are quarantined, as the observed phishing classification indicates a likelihood of credential‑stealing attempts. Because the site’s content and hosting characteristics remain unverified, threat hunters should treat any associated indicators of compromise with caution and prioritize blocking the domain until further forensic evidence becomes available.