emiratespost[.]check6753[.]shop

The domain emiratespost.check6753.shop was observed on July 24 2026 and is currently listed as offline. Infrastructure analysis shows the domain resolves to IP address 172.67.184.185, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is provided by the Cloudflare nameservers mina.ns.cloudflare.com and wells.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s edge network. The SSL certificate presented by the site is issued by Google Trust Services under the WE1 certificate profile, confirming that TLS termination occurs at the Cloudflare layer rather than on an origin server. An HTTP request to the domain returns a 403 status code, suggesting that access to the underlying content is currently denied, which aligns with the reported offline status.

Threat intelligence from VirusTotal shows that six of ninety‑three scanning engines have flagged the domain, providing modest but notable detection confidence. The domain has been added to a security blocklist and is actively blocked by the PhishDestroy sink‑hole service, reinforcing the assessment that it is being used for malicious phishing activity. Registration details reveal the domain was obtained through PublicDomainRegistry.com, operating under the PDR Ltd. umbrella, a registrar commonly associated with bulk registrations.

No public page title, Safe Browsing verdict, or Open Threat Exchange (OTX) indicators were available at the time of analysis, leaving the exact content and targeted brand unspecified. Consequently, defenders should treat the domain as a high‑confidence phishing indicator based on its hosting profile, SSL usage, detection count, and blocklist presence. Recommended mitigation steps include adding the domain to corporate web filtering and DNS blocklists, monitoring for any resurrection of the site, and conducting periodic re‑scans to capture potential changes in payload or infrastructure.