dauntr[.]link

Analysis indicates dauntr.link operated as a generic phishing infrastructure presenting itself as a “Darknet Link Directory - Daunt” portal designed to funnel users into a curated link hub associated with illicit navigation themes. The observed content and classification align with fake login / credential-harvesting behavior typical of link-directory lures rather than legitimate indexing services. The structure suggests a lure-based navigation hub intended to aggregate external redirect paths, a common pattern in phishing entry pages used to distribute downstream malicious destinations.

Technical telemetry shows VirusTotal detection ratio of 5/95 security vendors, indicating moderate malicious consensus. The domain was registered through Tucows Domains Inc. and resolves to IP address 104.21.18.32. Creation date is recorded as June 08, 2026. Infrastructure analysis notes deployment behind Cloudflare with HTTP/3 support and TLS issued via Let's Encrypt. The domain appears on 1 security blocklist and is referenced in 4 AlienVault OTX threat intelligence pulses. Additional reputation scoring reports a Gridinsoft trust score of 0/100.

At present, the domain status is reported as taken offline, suggesting disruption of active hosting; however historical telemetry indicates prior exposure across multiple threat intelligence feeds. The combination of low trust scoring, confirmed blocklist presence, and multi-vendor detections supports a high confidence phishing classification. Despite takedown status, residual risk persists through potential reactivation, mirror deployment, or infrastructure reuse under similar patterns. Historical indicators of compromise may be reused across redeployments, making continuous monitoring necessary. Users should avoid any historical URLs or cached pages associated with the domain, as link-directory phishing kits often migrate rapidly across newly registered infrastructure.