dmcahandler-x[.]com

Analysis of the domain dmcahandler-x.com indicates it was involved in a social media phishing campaign, as classified by available threat intelligence. The domain was registered on February 23, 2026, through HOSTINGER operations, UAB, and is associated with nameservers ns1.dns-parking.com and ns2.dns-parking.com. At the time of assessment, the domain resolved to IP address 84.32.84.32, hosted on AS47583 (Hostinger International Limited) in Lithuania. No SSL certificate was present, which is atypical for legitimate services and may have contributed to its detection by security vendors.

The domain appears on three security blocklists and has been flagged by PhishDestroy, MetaMask, and SEAL. VirusTotal reports two detections out of 93 security vendors, suggesting limited but confirmed malicious activity. The page title, 'Parked Domain name on Hostinger DNS system,' indicates the domain was not actively serving customized content at the time of analysis, though this does not preclude prior malicious use. The domain was taken offline by July 23, 2026, reducing immediate risk to end users.

Defenders should treat this domain as part of a broader social media phishing infrastructure. While the exact content or lures used remain unconfirmed, the classification as a social media phishing site aligns with known tactics targeting credentials or personal data. Network-level blocking of the IP 84.32.84.32 and monitoring for related domains registered under the same nameservers or registrar may help mitigate residual risk. Given the domain's offline status, further forensic analysis may be limited, but historical DNS and WHOIS records could provide additional context for incident responders.