arcwthbnkfin[.]com

This domain, arcwthbnkfin.com, is flagged as a credential phishing site targeting users with a fraudulent online banking interface. The page title, "Breed Banking, Easy Acount in Minutes - Online Banking," suggests an attempt to mimic legitimate financial institutions, likely exploiting typographical errors (e.g., "Acount") to deceive users. No known drainer kit or specific brand association has been identified, but the domain exhibits characteristics typical of generic phishing infrastructure designed to harvest login credentials. Analysis indicates the domain resolves to IP address 198.12.93.82 and was registered on June 13, 2025, through Dynadot LLC. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. VirusTotal reports 0/95 detections, indicating no antivirus engines have flagged it as malicious at the time of analysis. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Google Safe Browsing (GSB) status is not explicitly provided, but the domain's offline status suggests it may have been taken down or suspended. As of the latest assessment, arcwthbnkfin.com is offline, reducing immediate risk to users. However, the domain's recent creation date and lack of prior detection on VirusTotal highlight the need for continued monitoring. Organizations should update blocklists to include this domain and its associated IP address. Users who may have interacted with the site should reset credentials for any financial accounts and enable multi-factor authentication where available. The infrastructure remains a potential threat if reactivated.