profitempire[.]life[.]vescotradefx[.]live

Analysis indicates that the domain profitempire.life.vescotradefx.live was observed resolving to the IPv4 address 192.3.190.186, which is assigned to HostPapa (AS36352) and geolocated to the United States. The site presented a page title of “profitempire” and did not serve an SSL/TLS certificate, implying that any data exchanged would have been transmitted in clear text. VirusTotal scans reported that two of ninety‑five AV engines flagged the domain as malicious, and the domain appears on a single public blocklist. Independent monitoring by PhishDestroy has also listed the site as blocked. The Gridinsoft trust score was recorded as zero out of one hundred, reinforcing the low reputation of the host.

According to the supplied intelligence the site was classified as an investment‑scam impersonating the brand “across”, and the overall scam type was identified as an investment scam. The domain is currently offline, and no authoritative nameservers were reported. The available evidence establishes a clear malicious infrastructure: a US‑based hosting provider, lack of encryption, low trust metrics, and detection by multiple security vendors. However, the absence of detailed payload, phishing page screenshots, or victim reports limits the ability to map the exact lure or credential‑harvesting mechanisms.

Defenders should therefore add the IP address 192.3.190.186 to network‑level deny lists, block the fully qualified domain name in DNS filtering solutions, and ensure that any traffic to the domain is logged for forensic correlation. Continuous monitoring of HostPapa’s IP space for new domains exhibiting similar characteristics is advisable, as the provider has historically been used for short‑lived scam sites. Organizations should also verify that endpoints enforce TLS‑only policies to mitigate exposure to clear‑text communications from similar domains.