emiratespost[.]form8312[.]icu

This report analyzes the domain emiratespost.form8312.icu. The site presented a page title of "Just a moment..." with no visible content, indicating it was not a functional website. The domain name attempts to impersonate the brand Emirates Post, a legitimate postal service, likely to deceive users into believing they are accessing an official tracking or delivery portal. The threat posed is a phishing or credential harvesting campaign targeting individuals expecting postal communications, potentially leading to data theft or financial fraud.

Technical analysis reveals the domain was flagged by 9 out of 95 VirusTotal vendors, including alphaMountain.ai, BitDefender, CRDF, CyRadar, and ESET. It appears on 1 blocklist. The domain was registered through Web Commerce Communications Limited, created on 2025-11-30, and hosted on IP address 188.114.97.3 in the United States, assigned to AS13335 Cloudflare, Inc. The nameservers are aldo.ns.cloudflare.com and desi.ns.cloudflare.com. No SSL certificate was detected.

The domain is currently offline or down, indicated by a status of DOWN/OFFLINE. The GridinSoft trust rating is 0 out of 100. Based on the high detection rate, brand impersonation, and recent creation date, the risk level is assessed as high. Users who may have interacted with this domain should monitor for unauthorized account activity and change any credentials entered on the site.