arcan[.]eu[.]com

Analysis indicates that the domain arcan.eu.com was registered on February 21, 2026 through Instra Corporation Pty Ltd. The public page title returned by the server reads "Arcan Agency Website Design Company Services," suggesting the site is positioned as a design agency. No additional branding or target victim information is present in the available intelligence, leaving the exact impersonation focus uncertain.

Infrastructure examination shows the domain resolves to IP address 186.2.165.47, which is allocated to AS59692 IQWeb FZ-LLC and geolocated in the United Arab Emirates. The domain relies on four CentralNIC name servers (ns1.centralnic.net, ns2.centralnic.net, ns3.centralnic.net, ns4.centralnic.net), a configuration commonly observed in newly registered domains used for phishing campaigns. The TLS certificate presented is issued by a provider identified as ddos-guard, a service frequently associated with fast‑flux and abuse‑resilient hosting.

Observations from security tooling reveal that the site returns an HTTP 503 status, which may be employed to obscure content or to trigger automated detection. The domain appears on a single security blocklist and is explicitly listed by PhishDestroy, indicating active monitoring by at least one anti‑phishing organization. VirusTotal reports two out of ninety‑five scanning engines flagging the domain, while Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the low confidence in its legitimacy.

Given the high‑risk classification and the active status of the domain, defenders should add arcan.eu.com to network‑level deny lists, enforce DNS filtering, and monitor for any outbound connections to the associated IP address. Continuous re‑evaluation of threat intelligence feeds is advised to capture any emerging indicators, such as additional blocklist listings or changes in the site’s HTTP response that could signal a shift in malicious activity.