b1lackstash[.]cc

The domain b1lackstash.cc was registered on March 02, 2026 through GoDaddy.com, LLC and is currently active. DNS resolution points to 172.67.197.30, which belongs to AS13335 Cloudflare, Inc., and the domain is served behind Cloudflare's network using the nameservers ariadne.ns.cloudflare.com and evan.ns.cloudflare.com. An SSL certificate issued by Google Trust Services validates the HTTPS connection, and the web server returns HTTP 200 responses. The page title observed is "b1ack's Stash , blackstash , b1ackstash", indicating the site is positioning itself as a "Blackstash" service, though the exact brand or service being spoofed is not confirmed. Technical fingerprints show a Python/Django back‑end with Bootstrap front‑end components, and Cloudflare Browser Insights and HTTP/3 are in use. Threat intelligence flags the domain as high‑risk: it appears on one security blocklist, is blocked by PhishDestroy, and three of ninety‑three VirusTotal scanners have flagged it. The Gridinsoft trust score is 32 out of 100, reinforcing the malicious assessment. No additional details about the content or credential‑harvesting mechanisms have been disclosed, leaving the precise phishing vector uncertain. Defenders should immediately block DNS resolution for b1lackstash.cc, add the domain to URL filtering and web‑proxy deny lists, and monitor outbound traffic for connections to the associated Cloudflare IP range. Continuous scanning of the site for changes, and correlation with any credential‑theft alerts, is recommended to mitigate potential compromise.