empirexs[.]top

Empirexs.top was registered on October 20 2025 through NameSilo, LLC. The domain resolves to 172.67.136.91, an address owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. HTTPS is enabled with an SSL certificate identified as “WE1”. The page title returned by the server reads “Empirexs: Most Popular Online Crypto Casino Based on Blockchain”, which aligns with the observed scam kit label “Gambler Scam” and the classification “Crypto Scam”. VirusTotal analysis shows that 10 out of 93 scanning vendors flagged the domain as malicious.

Independent reputation services assign a Gridinsoft trust score of 0 / 100, indicating a high confidence of malicious intent. The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy service. As of the report date (July 24 2026) the site is taken offline, preventing direct observation of its payload. The available evidence confirms that empirexs.top was used to lure victims into a fraudulent cryptocurrency casino operation.

Uncertainty remains regarding the specific phishing flow, credential collection mechanisms, and whether additional infrastructure shares the same IP range. Defensive teams should add the domain and its hosting IP to outbound and inbound filtering rules, ensure the address is present in local DNS blocklists, and monitor Cloudflare‑associated IPs for re‑use. Continuous re‑scanning with multi‑vendor platforms is advised to capture any future changes in detection status.