distribution-unyka[.]com

The domain distribution-unyka.com was registered on May 17, 2026 through WHC Online Solutions Inc. and is currently active with an HTTP 200 response. The registration utilizes the nameservers parking1.whc.ca and parking2.whc.ca, both associated with the registrar WHC.ca. The site presents a generic page title stating “Domain registered at WHC.ca,” offering no direct indication of the targeted brand or service. A Let's Encrypt certificate (issued by E7) secures the site, but the presence of a valid TLS certificate does not mitigate the underlying malicious intent.

Infrastructure analysis shows that the domain resolves to the IPv4 address 149.56.225.6, which is hosted in Canada under a Web Hosting Canada provider. The IP has been observed in a single AlienVault OTX threat pulse and appears on three independent security blocklists. It is actively blocked by PhishDestroy, MetaMask, and SEAL, suggesting that multiple anti‑phishing engines have identified it as malicious. VirusTotal reports a single vendor flagging the domain out of ninety‑five scanned, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low confidence in its legitimacy.

The evidence points to a high‑risk, generic phishing operation that likely employs the domain as a front for credential harvesting, although the specific brand being spoofed remains unknown. Defenders should treat any traffic to distribution-unyka.com as hostile, enforce blocklisting of the associated IP 149.56.225.6, and monitor for any related domains using the same WHC.ca nameservers. Network security teams are advised to update intrusion detection signatures to flag TLS connections to this certificate issuer when paired with the observed IP, and to educate end‑users about the lack of legitimate branding on the site. Continuous monitoring of threat‑intel feeds for additional indicators of compromise is recommended to detect any expansion of the campaign.