uae-dchamberpayments[.]com

This domain, uae-dchamberpayments.com, was registered on July 19, 2026 through Fewmoretaps OU doing business as Trustname.com. The domain resolves to the IP address 172.67.185.105 and uses Cloudflare nameservers grannbo.ns.cloudflare.com and ricardo.ns.cloudflare.com. VirusTotal records indicate that four of ninety‑one security vendors flagged the domain, and it appears on a single external blocklist. The domain has been actively blocked by the PhishDestroy mitigation service, confirming that it is being used in a credential‑harvesting campaign targeting users who may be misled by references to the United Arab Emirates Chamber of Commerce payment portal.

Infrastructure analysis shows no additional hosting anomalies; the IP belongs to a Cloudflare edge node, a common choice for fast‑fluctuating malicious sites. The short registration window—only five days before the first detection—suggests a fast‑flux style deployment intended to evade long‑term reputation building. No SSL certificate details, HTTP response codes, or page‑title information have been published, leaving the content of the landing page unverified.

Defenders should continue to block the domain at network perimeter and endpoint layers, add the IP 172.67.185.105 to deny‑list entries, and monitor for any DNS queries to the associated Cloudflare nameservers. Email gateways should be tuned to flag messages that reference “uae‑dchamberpayments” or related phrases, and users should be educated to verify any payment‑related communications through official channels. Ongoing surveillance is recommended to capture any evolution of the site’s hosting or further detection by additional vendors.