arciumlearn[.]xyz

Analysis indicates that arciumlearn.xyz was registered on September 01, 2025 through Unstoppable Domains Inc. and resolves to the IPv4 address 76.76.21.21, which is owned by Amazon.com, Inc. (AS16509) and geolocated in the United States. The site presented the page title “Arcium Learn Hub” and did not serve an SSL/TLS certificate, leaving the HTTP connection unencrypted. Infrastructure inspection shows the domain is delegated to three Google Cloud DNS name servers (ns-cloud-b1.googledomains.com, ns-cloud-b2.googledomains.com, ns-cloud-b3.googledo).

Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist. VirusTotal scans reported that four of ninety‑five AV engines flagged the domain as malicious, reinforcing the suspicion of phishing activity. The domain has been taken offline and is listed as blocked by the PhishDestroy feed.

Defenders should add arciumlearn.xyz to existing URL and domain blocklists, enforce outbound filtering to prevent connections to the associated IP address, and monitor for any re‑registration of the same name or similar patterns on the same name‑server infrastructure. Because the domain leverages a reputable cloud provider, threat‑hunting rules that correlate suspicious DNS queries to the Google Cloud name‑servers with the observed IP range may improve detection of future iterations. Continuous review of the blocklist status and periodic rescans with VirusTotal or similar multi‑engine services are recommended to capture any changes in the detection landscape.