aarcorealestate[.]lk

PhishDestroy first observed aarcorealestate.lk on Aug 28, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and URLQuery. VirusTotal recorded 15 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Aug 28, 2026 at 19:50 UTC. URLQuery recorded 2 detections; no observation timestamp was retained. Non-positive and contextual checks: AlienVault OTX listed 5 community pulse references (not vendor detections) on Aug 28, 2026 at 21:41 UTC. The separate external-blocklist snapshot contained no matches on Aug 28, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Aug 28, 2026 at 21:40 UTC. URLScan captured the page on Aug 28, 2026 at 19:49 UTC.

The collector marked the hostname reachable on Aug 28, 2026 at 19:49 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 64.120.94.96. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer.

The record contains 2 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.