emirexprime[.]live

The domain emirexprime.live was identified as a brand‑impersonation site and is currently taken offline. The page title returned by the host, "Emirex Prime | Online Forex, Crypto Currency Investment And Trading Platform," indicates an investment‑scam narrative that attempts to lure victims into cryptocurrency or forex trading. The site was blocked by PhishDestroy and appears on a single security blocklist, confirming that at least one external mitigation service has taken protective action. Infrastructure analysis shows the domain resolves to IP address 163.61.188.5, which is registered to the AS153568 network operated by NEW DHAKA HARDWARE in the United States.

The IP’s hosting environment is associated with the HOSTINGER operations, UAB registrar, a common provider for disposable or low‑cost malicious sites. No SSL certificate was presented, meaning the site served content over plain HTTP, a typical characteristic of fast‑deployed scam infrastructure. Trust metrics are extremely low: Gridinsoft assigns a score of 0 / 100, and Scamadviser reports a trust score of 16 / 100, both indicating a high likelihood of fraudulent activity. VirusTotal analysis shows that eight of ninety‑five scanning engines flagged the domain, reinforcing the malicious classification.

The brand target is listed as "base," suggesting the site attempts to impersonate or exploit that brand’s reputation. Given the lack of encryption, low trust scores, and multiple vendor detections, defenders should add emirexprime.live to blocklists at network perimeter and endpoint layers, monitor the associated IP for any residual activity, and consider sharing the indicator with threat‑intel communities. Continuous re‑query of the domain’s status is advised, as offline sites can be re‑activated under different subdomains or IP addresses.