emmascotrade[.]com

The domain emmascotrade.com was registered on 2026-02-21 and currently resolves to the IPv4 address 198.12.66.123, which geolocates to the United States (attributed to Sajjad Hassanpour). The intelligence feed marks the domain as offline and indicates it has been taken down by the PhishDestroy blocklist. Gridinsoft assigns a trust score of 0 out of 100, indicating no confidence in its legitimacy. It appears on a single security blocklist and has been flagged by one of ninety‑three VirusTotal scanners, confirming at least one vendor detection.

No additional detections are reported by other public reputation services. The limited presence on blocklists suggests that the malicious activity may be recent or low‑volume. Because the domain is offline, active probing is not possible and no live content can be inspected to verify the exact phishing lure. The single vendor flag on VirusTotal does not disclose the detection name, limiting insight into the underlying malicious code or template.

No SSL/TLS details, HTTP status codes, or page title information are available, so encryption status and page behavior cannot be assessed. Registrar information was not supplied, preventing attribution of registration abuse patterns. Defenders should continue to block the domain at the network perimeter and DNS level, monitor for any outbound connections to the associated IP address, and update detection rules to include the observed indicator set. Given the confirmed phishing classification in the intelligence source, security teams should treat any email or web traffic referencing emmascotrade.com as malicious, enforce user‑awareness alerts, and consider adding the domain to internal blocklists until the infrastructure is fully retired.