darkhouse[.]cc

Analysis conducted on July 24, 2026 indicates that the domain darkhouse.cc is currently offline. The sole page title observed, “DarkHouse | Connexion utilisateur”, suggests a French‑language login interface, although the content has not been captured. Infrastructure examination shows the domain resolves to the IPv4 address 95.214.26.30, which belongs to AS212238 operated by Datacamp Limited and is geolocated in Brazil. The domain was registered through the RIPE NCC registry; only one authoritative nameserver is listed, but its name is not disclosed.

No TLS certificate is presented, meaning connections would be unencrypted if the site were active. Reputation services provide mixed signals: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist. VirusTotal analysis reports three detections out of ninety‑five scanned engines, confirming that at least a few AV products flag the site as malicious. PhishDestroy has also listed the domain as blocked.

The limited number of detections and the single blocklist entry suggest that the phishing campaign may be short‑lived or low‑profile, but the presence of a dedicated blocklist entry and multiple vendor flags warrants elevated risk classification. Uncertainty remains regarding the specific phishing template, target audience, and whether any credential harvesting was ever operational before takedown. Defenders should continue to block traffic to 95.214.26.30 and to darkhouse.cc at the DNS and network layers, monitor threat‑intel feeds for any re‑registration attempts, and consider adding the domain to internal allow‑list exclusions for security tools that rely on reputation scoring. Ongoing observation of the registrar’s activity and any future SSL deployment is recommended to detect possible re‑activation.