unitrade-dcx[.]com

The domain unitrade-dcx.com is currently flagged as a high‑risk social media phishing site. It was registered on 21 February 2026 through NETIM SAS and remains active as of 12 July 2026. The page title matches the hostname, indicating a straightforward impersonation strategy aimed at luring victims from social platforms. The threat is categorized as social media phishing, and the risk level is assigned as high.

Infrastructure analysis reveals that the domain resolves to the IPv4 address 45.9.148.131, which is geolocated to the Netherlands and attributed to Nice IT Services Group Inc. The web server runs Nginx with OpenResty, and the TLS certificate is issued by Let’s Encrypt under the YR1 profile, confirming recent acquisition. Nameservers are ns1.netim.net, ns2.netim.net, and ns3.netim.net, all consistent with the registrar's default configuration. HTTP requests return a 200 status code, indicating the site is operational.

Detection data shows the domain appears on one security blocklist, specifically PhishDestroy, and three of ninety‑five VirusTotal scanners have flagged it. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. No additional intelligence about the phishing payload, credential‑harvesting forms, or command‑and‑control infrastructure is presently available, leaving the exact phishing methodology uncertain beyond the social media lure.

Defenders should treat unitrade-dcx.com as a confirmed malicious endpoint. Immediate actions include adding the domain and its resolving IP address to deny‑list entries in firewalls, web proxies, and DNS filtering solutions. Continuous monitoring for changes in hosting, certificate renewal, or the emergence of related domains is advised, as the threat actor may pivot to fresh infrastructure. Organizations are urged to educate users about the risks of unsolicited social media messages that direct to such domains.