empire-assets[.]com

Analysis of empire-assets.com shows a confirmed technical support fraud infrastructure that leverages brand impersonation of Google. The domain was registered on February 21, 2026 and is currently reported as offline, with the takedown confirmed by the PhishDestroy blocklist. DNS resolution points to the IP address 75.127.1.122, which belongs to HostPapa (AS36352) and is geolocated in the United States. The site presented the page title "empire-assets.com" but did not expose additional content in the available data.

Security reputation services indicate extreme distrust: Gridinsoft assigns a trust score of 0 out of 100, Scamadviser reports a trust score of 1 out of 100, and the domain appears on at least one security blocklist. SSL analysis identified the certificate as type R11, without further validation details. VirusTotal scans recorded three positive detections out of ninety‑three participating vendors, corroborating malicious intent. AlienVault OTX references the domain in a single threat pulse, reinforcing its association with known malicious activity.

The documented scam type is a Tech Support Scam, specifically targeting Google users, which aligns with the brand impersonation tag. While the site is no longer reachable, the observed indicators—low trust scores, multiple vendor detections, inclusion on blocklists, and association with a known threat pulse—suggest that the infrastructure was actively used for fraudulent outreach. Defenders should continue to monitor the associated IP address for any re‑use, enforce outbound filtering to block traffic to the domain and its IP, and update detection signatures to reflect the observed SSL certificate profile and domain characteristics. Additional investigation of any residual artifacts, such as emails or scripts referencing empire-assets.com, is advised to fully assess the scope of the campaign.