arconacapitalam[.]com

arconacapitalam.com was registered on February 6, 2026 through Global Domain Group LLC and resolves to the IPv4 address 198.251.84.200, which is geolocated to Luxembourg and associated with FranTech Solutions. The site presents a valid Let’s Encrypt certificate (YR1) and serves content over HTTP/3, indicating recent infrastructure provisioning.

The domain is currently listed on a single security blocklist and has been flagged by PhishDestroy as active. AlienVault OTX includes the domain in two separate threat‑intelligence pulses, confirming its relevance to ongoing phishing campaigns. VirusTotal reports three positive detections out of ninety‑five scanners, and Gridinsoft assigns a trust score of 1 out of 100, reflecting a high likelihood of malicious intent.

Network traffic to the site returns an HTTP 302 redirect, a common technique used to forward victims to credential‑harvesting pages. Inspection of the page reveals a stack built on PHP and Bootstrap, powered by LiteSpeed web server. Client‑side libraries such as jQuery, Popper, OWL Carousel, and Smartsupp are loaded, suggesting a replica of a legitimate financial portal designed to capture login details.

Defenders should add 198.251.84.200 and the fully qualified domain name to block lists at perimeter and DNS filtering layers. Continuous monitoring of the IP for any changes in hosting or certificate renewal is advised. Organizations should educate users about the visual similarity of the site’s title, which matches the domain, and encourage verification of URLs before entering credentials.