emiratespost[.]trqf[.]top

This report analyzes the domain emiratespost.trqf.top, which is currently offline but was identified as a threat. The domain name impersonates Emirates Post, a legitimate postal service, to deceive users. The threat is social engineering, as the site was designed to trick visitors into providing sensitive information under the guise of a package delivery notification or service.

Technical evidence from VirusTotal shows 8 out of 95 security vendors flagged the domain as malicious, including ADMINUSLabs, alphaMountain.ai, Cluster25, CRDF, and CyRadar. Google Safe Browsing specifically flagged it for SOCIAL_ENGINEERING. The domain was registered through Dominet (HK) Limited and created on 2026-02-21. It resolves to IP address 188.114.97.3 (US), hosted on AS13335 Cloudflare, Inc. No SSL certificate was found. Nameservers are elias.ns.cloudflare.com and sunny.ns.cloudflare.com. The domain is currently on 1 blocklist.

As of the analysis, the domain is DOWN/OFFLINE, reducing immediate risk. However, the combination of recent creation, social engineering flag, and multiple vendor detections indicates a high risk for users who may have encountered it while active. The impersonation of a trusted postal brand elevates the threat potential for phishing.