naticdma[.]cc

This report provides an analysis of the domain naticdma.cc, identified as a social media phishing site impersonating Discord. The domain was registered on February 21, 2026, and was taken offline as of the report date, July 25, 2026. The Gridinsoft trust score for this domain is 0/100, indicating a high level of suspicion and risk.

The domain resolves to the IP address 172.81.131.105, which is located in the United States and is associated with AS27176 DataWagon LLC. While the domain is currently offline, it was previously flagged by one security vendor on VirusTotal, and it appears on a single security blocklist, specifically PhishDestroy. The page title for the domain was recorded as 'Natic DMA ~ Home', which suggests that the site was designed to appear legitimate to potential victims. The SSL certificate for the domain is rated E6, indicating a low level of trust in the certificate.

Given the domain's elevated risk level and its impersonation of Discord, defenders should ensure that their systems and users are aware of this threat and take appropriate measures to avoid any potential phishing attempts. Even though the domain is offline, it is advisable to monitor for any resurgence and to block access to the IP address 172.81.131.105. Additionally, users should be reminded to verify URLs and login pages when accessing Discord or any other trusted social media platforms to prevent falling victim to similar phishing schemes.