xa19p-fxempire[.]com

This domain, xa19p-fxempire.com, is identified as a phishing site with an elevated risk level. It is not associated with a specific brand or drainer kit, but its infrastructure and flagged status indicate it is designed to impersonate legitimate entities to gather sensitive information.

Infrastructure analysis reveals that the domain has a VirusTotal score of 6/95, indicating that 6 out of 95 security vendors have flagged this domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.97.3. It was created on March 27, 2026. The Google Trust Services SSL certificate does not mitigate the risk, as it is commonly used by legitimate and malicious sites alike. The domain appears on 2 security blocklists and is currently blocked by PhishDestroy and OISD. The Gridinsoft trust score for this domain is 0/100, reflecting a complete lack of trustworthiness. AlienVault OTX has identified the domain in 1 threat intelligence pulse, further corroborating the threat.

The current status of xa19p-fxempire.com is offline, which suggests that it has been taken down by either the domain registrar or security authorities. However, the offline status does not eliminate the risk entirely, as the domain could be reactivated. Users are advised to avoid any links or communications related to this domain and to ensure that their security software is up to date. Organizations should monitor their networks for any attempts to access this domain and consider implementing additional security measures to prevent potential phishing attacks.