6efc9f[.]arcadejafet[.]cl

6efc9f.arcadejafet.cl is a subdomain of arcadejafet.cl. PhishDestroy first observed the hostname on Aug 12, 2026. Stored content metadata identifies Adobe as the apparent target. The captured page title is “Adobe Acrobat - Secure PDF Document”. Stored page analysis classifies the content as impersonation. Current evidence score: 89/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, Google Safe Browsing, Cloudflare Radar, and URLScan. VirusTotal recorded 13 detections among 91 engines: BitDefender, Cluster25, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safe Browsing, Gridinsoft, Kaspersky, LevelBlue, MalwareURL, OpenPhish, SOCRadar, Sophos on Aug 21, 2026 at 05:31 UTC. Google Safe Browsing flagged the domain: Social Engineering on Aug 21, 2026 at 05:32 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Adobe and assigned phishing as its category on Aug 12, 2026 at 05:08 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 22, 2026 at 10:20 UTC.

The collector marked the hostname reachable on Aug 17, 2026 at 22:15 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 207.210.102.120 on AS263702 (AS263702 - GRUPO ZGH SPA, CL). The recorded endpoint location is Santiago, CL. The stored server header is LiteSpeed. DOM analysis on Aug 12, 2026 at 02:22 UTC returned 88/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and Cloudflare Radar. TLS metadata lists Let's Encrypt / YR1 as the certificate issuer with validity through Oct 4, 2026; checked Aug 12, 2026 at 04:02 UTC.

The content indicators and 4 positive source findings support the current Adobe-themed impersonation classification.