arkbtc[.]io

Analysis of arkbtc.io shows a newly registered domain (creation date March 03, 2026) that is actively serving a crypto‑related scam. The domain resolves to IP 104.21.27.13, hosted behind Cloudflare (AS13335) with nameservers johnny.ns.cloudflare.com and millie.ns.cloudflare.com. HTTP requests return a 403 status and the page title is reported as "404 Not Found," indicating that the site is either deliberately hiding its content or serving error pages to casual visitors. The TLS certificate is issued by Let’s Encrypt (E7), and the site leverages Cloudflare Browser Insights and HTTP/3, suggesting a modern hosting configuration. Threat intelligence flags the domain as high‑risk and it is already blocked by PhishDestroy; Gridinsoft assigns a trust score of 0/100, and six of ninety‑four VirusTotal scanners have flagged the host, confirming malicious intent. The only publicly known classification is a "Crypto Scam," but the exact phishing payload or victim‑targeting mechanisms have not been observed. Defenders should treat arkbtc.io as hostile: add the domain to outbound and inbound blocklists, monitor DNS queries for the associated IP and nameservers, and consider sinkholing the IP range if feasible. Continuous re‑evaluation is advised, as the site may later serve active phishing pages or malicious downloads.