camelot-exchange[.]org

The domain camelot-exchange.org is a confirmed phishing site engaged in brand impersonation targeting users of the Arbitrum cryptocurrency platform. It presents itself as a decentralized exchange (DEX) under the name 'Camelot DEX' to deceive victims into interacting with fraudulent smart contracts or disclosing wallet credentials. No drainer kit was identified, but the site was actively used for cryptocurrency scams. As of the latest verification, camelot-exchange.org has been taken offline.

Technical indicators confirm the malicious nature of camelot-exchange.org. The domain is flagged by 14 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and AlphaSOC, though it remains unflagged by Google Safe Browsing. It appears on one security blocklist, PhishDestroy. The domain was created on February 21, 2026, and resolves to the IP address 172.67.178.208, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title is 'Camelot DEX | Arbitrum native Decentralized Exchange'.

Users who interacted with camelot-exchange.org should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If credentials or private keys were entered, consider the compromised wallet at high risk and avoid further use. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the phishing domain to platforms like PhishTank, Google Safe Browsing, or the impersonated brand (Arbitrum) to aid in takedown efforts.