decartmirage[.]com

This domain, decartmirage.com, was registered on July 18, 2025, through Dynadot LLC and remains active as of July 24, 2026. Infrastructure analysis reveals the site is currently resolving to 188.114.97.3, a Cloudflare IP address (AS13335) located in the United States. The domain is protected by Cloudflare technologies, including HTTP/3, and presents a valid SSL certificate issued by Google Trust Services (WE1). The page title, 'Plesk Obsidian 18.0.70,' suggests the site may be attempting to mimic or exploit Plesk server management software, though the exact content and intent of the page have not been fully analyzed.

Detection data indicates the domain is flagged by one security vendor on VirusTotal, though no additional context about the nature of the detection is available. It also appears on one security blocklist, specifically PhishDestroy. The HTTP response status is 200, confirming the site is accessible. The domain uses a single nameserver, which may simplify takedown efforts but does not inherently indicate malicious activity.

At present, there is no confirmed brand target or scam classification beyond the generic phishing designation. Defenders should treat this domain as high-risk due to its recent registration, use of Cloudflare for potential obfuscation, and detection by security vendors. Organizations are advised to block access to decartmirage.com at the network level and monitor for any attempts to leverage this domain in phishing campaigns. Further investigation into the site's content and any associated infrastructure is recommended to determine the full scope of the threat.