arcmarket[.]online

Analysis of the domain arcmarket.online confirms its classification as a high-risk crypto drainer phishing site, designed to exploit users by draining cryptocurrency assets from connected wallets. This domain employs social engineering tactics to deceive victims into authorizing malicious transactions, often by impersonating legitimate decentralized finance (DeFi) platforms or marketplaces. Once a user connects their wallet, the site executes unauthorized smart contract interactions, transferring assets to attacker-controlled addresses without consent. The threat is particularly severe due to its direct financial impact, with victims frequently losing substantial sums before detecting the compromise. Technical indicators strongly support the malicious classification of arcmarket.online. The domain is flagged by 9 out of 95 security vendors on VirusTotal, including detections for social engineering and wallet-draining scripts. It appears on four distinct security blocklists, further corroborating its nefarious purpose. Infrastructure analysis reveals the domain was registered on May 24, 2026, through NAMECHEAP INC, a registrar frequently associated with phishing campaigns. The domain resolves to the IP address 216.198.79.1, which has been linked to other fraudulent activities in recent threat intelligence reports. The creation date, set in the future, suggests an attempt to evade initial scrutiny or automate domain rotation for sustained malicious operations. Users who have visited arcmarket.online or interacted with its content are advised to take immediate remedial action. Disconnect any wallets previously linked to the site and revoke all active smart contract authorizations using a trusted blockchain explorer. Conduct a full audit of wallet transactions to identify unauthorized transfers, and transfer remaining assets to a new, secure wallet. Monitor accounts for suspicious activity, as attackers may retain access through compromised credentials or session tokens. Report the domain to relevant security communities to aid in broader mitigation efforts, and educate peers about the risks of connecting wallets to unverified platforms.