unrealvision[.]com

Analysis as of July 24, 2026 indicates that the domain unrealvision.com is actively being used for a generic phishing campaign. The domain resolves to the IPv4 address 192.252.156.28, which is advertised as being hosted by ICDSoft Ltd. (ASN 8739) in the United States. The web server returns an HTTP 302 redirect and does not present an SSL certificate, meaning all communications are unencrypted. The only observed page title is “Slide1.JPG (1280×720)”, which provides no indication of a legitimate service and suggests the site may be serving a single static image or placeholder.

Registration data shows the domain was created on 17 November 2003 and is registered through ENOM, INC., with four name‑service DNS hosts (dns1‑dns4.name‑services.com). VirusTotal scans have flagged the domain in four out of ninety‑five security engines, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The domain is currently listed on the PhishDestroy blocklist and appears on one additional security blocklist, confirming that at least some community filters are already blocking it. While the redirect target and the exact content delivered after the 302 response have not been publicly disclosed, the combination of a non‑SSL endpoint, a generic image title, low trust scores, and multiple vendor detections strongly suggests a phishing infrastructure.

Defenders should add unrealvision.com and its resolved IP address 192.252.156.28 to deny‑list or firewall rules, monitor outbound connections for HTTP 302 responses to this host, and ensure any email filtering solutions reference the PhishDestroy list. Continuous re‑scanning on VirusTotal and similar platforms is recommended to capture any changes in detection rates. Because the domain is older but still active, it may be repurposed for new campaigns, so organizations should treat any traffic to it as suspicious until fully verified.