emaarpass[.]us

The domain emaarpass.us impersonates Google, aiming to deceive users into divulging sensitive information. It was detected by PhishDestroy on June 20, 2026, and has since been taken down. Despite being offline, the domain had already been flagged by one out of 91 vendors on VirusTotal and appeared on three public blocklists, including PhishDestroy, MetaMask, and SEAL.

Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, emaarpass.us was hosted on an IP address managed by Cloudflare, Inc., located in the United States. The domain utilized an SSL certificate issued by Let's Encrypt, which is common for phishing sites aiming to appear legitimate. The platform risk score for this domain was notably high at 78 out of 100, indicating a significant threat level during its active period.

Phishing domains like emaarpass.us often exploit the initial gap between domain registration and antivirus database updates, typically within 24-72 hours. PhishDestroy's detection pipeline operates ahead of many antivirus vendors, capturing threats in this critical window. This proactive approach ensures that even newly registered domains are identified and mitigated before they can cause widespread harm. The swift takedown of emaarpass.us underscores the importance of rapid detection and response in combating phishing threats.