amplife[.]money

amplife.money is an active domain registered through Cloudflare, Inc. on April 27 2026. The zone resolves to the Cloudflare edge address 188.114.96.3 located in Canada and uses the nameservers ligia.ns.cloudflare.com and ryan.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint. The site returns HTTP 200 and its page title is “Amplify | Ample | Ample”, but no further content analysis is available. VirusTotal scans show four of ninety‑one AV engines flag the domain, and Gridinsoft assigns a trust score of 0 / 100. The domain is listed on three public blocklists and has been referenced in one AlienVault OTX pulse. It is also marked as blocked by PhishDestroy, MetaMask, and SEAL. These indicators collectively point to a high‑risk generic phishing infrastructure that is still live. Uncertainty remains around the exact phishing payload, target audience, and whether the site hosts credential‑stealing forms, as only the page title and HTTP status have been observed. Defenders should block any network traffic to 188.114.96.3, add the domain to URL filtering policies, and monitor for related hash or indicator matches in their telemetry. Continuous re‑scanning with multi‑engine services is advised to capture any emerging payloads. The combination of low trust scores, multiple blocklist listings, and active status warrants immediate mitigation.