artrecast[.]com

This domain, artrecast.com, is flagged as an active high-risk brand impersonation site targeting Google. Registered on January 2, 2025, through NameCheap, Inc., the domain presents itself as an NFT marketplace, as indicated by its page title: 'ArtRecast - NFT Marketplace, Buy NFTs, Sell NFTs, Crypto Art, Digital Collectibles.' Infrastructure analysis reveals the domain resolves to IP address 178.162.234.23, hosted on AS28753 (Leaseweb Deutschland GmbH) in Germany. The site employs nameservers cs11.hpcnoc.com and cs12.hpcnoc.com and is protected by a Let's Encrypt SSL certificate (R12). Detected technologies include Bootstrap, LiteSpeed, Cloudflare, SweetAlert2, SweetAlert, Smartsupp, OWL Carousel, and jsDelivr, suggesting a structured front-end designed to appear legitimate. The domain is currently active, returning an HTTP 200 status, and is blocked by at least one security vendor (PhishDestroy). Two of ninety-five security vendors on VirusTotal have flagged the domain, though the specific detection context remains unverified. MX records point to the domain itself (artrecast.com), which may indicate email spoofing capabilities or internal mail routing for fraudulent communications. Gridinsoft assigns a trust score of 39 out of 100, reinforcing its high-risk classification. While the domain is explicitly labeled as a tech support scam and impersonates Google, the exact nature of its fraudulent activity—whether phishing credentials, distributing malware, or soliciting payments under false pretenses—has not been fully analyzed. Defenders should treat this domain as hostile and prioritize blocking it at the DNS, IP, and network levels. Monitoring for related domains using the same nameservers or IP infrastructure may uncover additional threats. Given its recent registration and active status, further investigation into its traffic sources and associated campaigns is recommended.