arc-invoice-1i1[.]pages[.]dev

This domain, arc-invoice-1i1.pages.dev, is identified as a high-risk crypto drainer phishing site. The threat posed by this domain is significant, as it is designed to trick users into revealing sensitive information, such as private keys or login credentials, which can lead to the theft of cryptocurrency. Once a user is lured to the site, the attackers can use the obtained information to drain their digital wallets or gain unauthorized access to their accounts.

Analysis indicates that the domain is flagged by 2 out of 95 security vendors on VirusTotal, which suggests that while the site may not be widely recognized, it has already been identified as a potential threat by some security solutions. The domain was created on June 11, 2026, and is registered through Cloudflare, Inc. The site resolves to the IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services / WE1. These technical indicators, combined with the domain's appearance on three security blocklists, including PhishDestroy, MetaMask, and SEAL, further confirm its malicious nature.

If a user has visited this domain, they should take immediate action to protect their assets and personal information. First, it is recommended to change any passwords or private keys that may have been entered on the site. Additionally, users should monitor their accounts for any unauthorized transactions and consider enabling two-factor authentication (2FA) if it is not already active. It is also advisable to run a full system scan using reputable antivirus software to ensure that no malware has been installed. Finally, users should report the incident to their security team or a trusted cybersecurity professional for further assistance.