arcus-app[.]top

Arcus-app.top was registered on July 19 2026 through Global Domain Group LLC and is currently active. DNS resolution points to the IPv4 address 188.114.97.3, and the authoritative name servers are adam.ns.cloudflare.com and danica.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. VirusTotal analysis shows that one out of ninety‑five security vendors flagged the domain as malicious, providing an early indication of suspicious activity. The domain appears on a single public security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one anti‑phishing organization has observed malicious use. The threat classification supplied is generic phishing, and the risk level is assigned as high. No additional intelligence such as a page title, SSL certificate details, HTTP response codes, or public threat‑intel identifiers (OTX, etc.) has been published, leaving those aspects of the infrastructure unverified at this time. Because the domain is recent, continuously resolves to the same IP, and is already being distributed by a blocklist, defenders should prioritize inbound and outbound filtering of traffic to 188.114.97.3 and consider adding arcus-app.top to local deny lists. Ongoing monitoring of DNS queries for the domain and its Cloudflare name servers is advised to detect any future changes in hosting or resolution patterns. Organizations employing web‑gateway or URL‑filtering solutions should ensure the domain is categorized as malicious to prevent credential harvesting attempts. The limited detection footprint suggests a low‑profile campaign, but the high‑risk rating warrants immediate defensive action.