emirex[.]app

This report analyzes the domain emirex.app, which at the time of assessment was offline and presented no accessible page title or content. Based on the domain name and available indicators, the site poses a threat as a potential phishing or fraudulent cryptocurrency exchange platform, designed to harvest user credentials or financial information from victims.

Technical analysis reveals 3 out of 95 VirusTotal security vendors flagged the domain as malicious, specifically CRDF, Gridinsoft, and Seclookup. The domain is listed on one blocklist. It was registered through Tucows Domains Inc. and created on 2026-02-21. The domain resolves to IP address 45.11.229.115, located in Germany and hosted on AS58087 operated by Florian Kolb. No SSL certificate was detected. The authoritative nameservers are 1-you.njalla.no, 2-can.njalla.in, and 3-get.njalla.fo, all associated with Njalla, a privacy-focused registrar.

The domain is currently down or offline, indicating it may be temporarily inactive or taken down. The DOM risk score of 56 suggests a medium-to-high threat level, supported by the low creation date and multiple vendor flags. This domain should be blocked and monitored for reactivation.