Domain security report

arcportal.icu

“Deposit USDC to Arc | Bridge USDC to Arc | ArcPortal”

Tehdit kararı

YüksekAlan Adı İtirazı

Assessment sources

Assessment based on the stored source evidence below. Review sources →

66/100

Evidence score

Kullanılabilirlik Doğrulanmamış Mevcut erişilebilirlik doğrulanmadı Gözlemlenen Oct 16, 01:59 UTC· HTTP probe

Risk sinyalleri

VirusTotal algılamaları: 3/92 Saklanan engelleme listesi eşleşmeleri: 2 Automated brand label: MetaMask Genç alan adı: 27 günlük

Kayıt kuruluşu: PDR
Resolved IP: 188.114.96.3
Registered: 18.09.2026

Stored captures

2 sources

The capture source is temporarily unavailable.

Kaynak: Primary capture
Collected · UTC: 2026-10-16 01:59 UTC

Open capture

Primary capture

URLScan capture

In this reportGet help

Rapor özeti

arcportal.icu — Doğrulanmamış. Marka kimliğine bürünme: MetaMask; Dolandırıcılık türü: Crypto Drainer. Kanıt özeti: VirusTotal 3/92 (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Kayıt kuruluşu: PDR.

The evidence summary below uses retained observations. Each source keeps its own collection date.

Additional indicators at a glance

VirusTotal

3 det.

OTX references

4 community refs

URLScan

Rapor ↗

TLS sertifikası

Within stored validity dates

Let's Encrypt / YE2 · Hostname coverage not recorded

Yaş

27d Very New!

DestroyList

Listelenmiş

Source evidence

8 · sources

These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.

VirusTotal

3 / 92

2026-10-16 05:14:33 UTC

Bildir

Interpretation & limits

Engine detections from this stored analysis. Vendors and collection times may differ from other sources.

Public blocklists

2 external matches

2026-10-16 02:20:01 UTC

Ayrıntılar

Interpretation & limits

A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.

URLQuery

Report stored; detailed verdict not recorded

Observation time not recorded

Bildir

Interpretation & limits

Alerts refer to the preserved scan. They do not describe the current state of the site.

OTX

4 community references

2026-10-16 05:14:53 UTC

Bildir

Interpretation & limits

Community publication references, not a vendor verdict or evidence of a common operator.

CF Radarı

provider verdict: suspicious

Observation time not recorded

Bildir

Interpretation & limits

A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.

URLScan capture

saklanan rapor

View stored capture ↗

2026-10-16 01:59:06 UTC

Bildir

Interpretation & limits

A preserved page image documents what the collector received; a capture is not a safety verdict.

URLScan verdict

Analiz tamamlandı

2026-10-16 03:30:06 UTC

Bildir

Interpretation & limits

This is the recorded automated analysis. Completion alone is not a safety verdict.

Google Safe Browsing

Checked; no threat flag recorded

2026-10-16 05:14:37 UTC

Bildir

Interpretation & limits

A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.

Kanıt özeti

Evidence-based analysis Generated from the observations retained in this report. No stored AI narrative is available for this record. Each source retains its own collection date.

PhishDestroy first observed arcportal.icu on Oct 16, 2026. Stored content metadata identifies MetaMask as the apparent target. The captured page title is “Deposit USDC to Arc | Bridge USDC to Arc | ArcPortal”. Page analysis recorded additional brand references to Morpho. Stored page analysis classifies the content as crypto drainer. Current evidence score: 66/100 (high).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 3 detections among 92 engines: alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet on Oct 16, 2026 at 05:14 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Oct 16, 2026 at 02:20 UTC. Additional recorded evidence: AlienVault OTX listed 4 community pulse references (not vendor detections) on Oct 16, 2026 at 05:14 UTC.

The collector marked the hostname reachable on Oct 16, 2026 at 01:59 UTC, but did not retain the HTTP response code. Latest classified outcome: unknown; cause probe inconclusive on Oct 15, 2026 at 23:59 UTC. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Sep 18, 2026 as the creation date. Registration preceded first observation by 27 days. At collection time, the hostname resolved to 188.114.96.3 (AS13335 Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Oct 16, 2026 at 02:20 UTC returned 15/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction on Oct 16, 2026 at 04:00 UTC retained 3 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt / YE2 as the certificate issuer with validity through Dec 27, 2026; checked Oct 16, 2026 at 04:02 UTC.

The content indicators and 3 positive source findings support the current MetaMask-themed crypto drainer classification.

What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.

Recorded dataPartial recordUTC

VirusTotal: 3 / 92 · engine detections2026-10-16 05:14:33 UTC
URLScan analysis: Automated verdict retained2026-10-16 03:30:06 UTC
URLQuery: Stored source recordCollection time not recorded
Google Safe Browsing: Checked; no threat flag recorded2026-10-16 05:14:37 UTC
OTX publications: 4 · community references2026-10-16 05:14:53 UTC
External blocklists: 2 · external matches2026-10-16 02:20:01 UTC
Cloudflare Radar: suspiciousCollection time not recorded
Spamhaus DBL: Collection time retained; verdict missing2026-10-16 02:30:28 UTC
Domain registration: PDR Ltd. d/b/a PublicDomainRegistry.comCollection time not recorded
Network & DNS: 188.114.96.3 · 2 · nameserversCollection time not recorded
TLS sertifikası: Let's Encrypt / YE22026-10-16 04:02:06 UTC
Page captures: 2 · retained captures2026-10-16 01:59:06 UTC
HTML archives: 1 · retained responses2026-10-16 02:00:22 UTC
Page analysis: 2 · automated brand labels2026-10-16 02:20:14 UTC
Observed indicators: 3 · wallet / Telegram indicators2026-10-16 04:00:06 UTC
Site configuration files: robots.txt · sitemap.xml · security.txt2026-10-16 02:00:22 UTC
PageSpeed performance: 97/100 · mobile performance2026-10-16 02:41:44 UTC
Availability history: 1 · stored state changes2026-10-16 01:59:06 UTC
Source observation history: 1 · stored source events2026-10-16 01:59:06 UTC
Lookalike relationships: 79 · retained relationshipsCollection time not recorded
IP reputation: Network-level observations2026-10-16 02:00:06 UTC

Not recorded in this report 10

These checks have no retained result. This does not mean they passed or that a scan is running.

PhishStats
DNS security filters
Gridinsoft
Scamadviser
Detection & evasion
Response records
Recorded subdomains
Topluluk raporları
Chainabuse records
Wayback archive

Download the dated observations and supporting metadata.

Extracted from stored page analysis

Observed indicators

3 wallet · 0 Telegram

Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.

ETH

0x8e357432cc12ff425c36432f312968aeb16112afFormat validated · Domain analysis

ETH

0xbeef0007d5a04246f5382957035df34f7e82102eFormat validated · Domain analysis

ETH

0xdeccd53be5453215821184824b519e04c7e00bc7Format validated · Domain analysis

IoC extraction recorded 2026-10-16 04:00:06 UTC

Genel Engelleme Listesi Durumu

Discord'da Kimlik Avı

NO MATCH

PhishFeed

NO MATCH

Domain details

Alan adı

URLScan verdict Analiz tamamlandı score 0 report ↗

Observed indicators3 wallet · 0 Telegram — full values ↗

IP Context Cloudflare shared edge origin IP hidden Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.

OTX tags 2026-10activeall-domainsblocklistcontentcryptoalan adlarıdrainerfraudlivemonthlyphishdestroyphishingscam

Kayıt kuruluşu PDR

(AM)

Kötüye kullanım iletişim bilgisiyuyunpilk@gmail.com, abuse@publicdomainregistry.com, abuse-contact@publicdomainregistry.com

ICANN Kayıt KuruluşuICANN Lookup (RDAP) →

WHOIS Aramaarcportal.icu için ICANN RDAP →

KayıtOluşturuldu 18.09.2026 (27d · Very New!) — Expires 18.09.2027

Teknik ayrıntılarProvenance & timestamps

İlk Kez Tespit Edildi16.10.2026

DOM Analysisanalyzed 16.10.2026score 15/1002 brand signals

IoC Extractionscanned 16.10.20263 wallet · 0 Telegram IoCs

Submitted URLhttp://arcportal.icu/

Favicon Hash

Vaka kimliği

SHORTDOT BÖLGESİ · KAMUYA AÇIK KANIT .icu

ShortDot zone evidence

The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.

ShortDot SA · Luxembourg 7 bölge · tüm bölgelere ait kanıtlar her gün güncellenir ShortDot kanıt deposunu aç

ICANN OVERSIGHT

Akreditasyon ve RAA bağlamı

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Akreditasyon bir sözleşmedir, güvenlik mührü değil. ICANN ücretlerini doğrulayın RAA §3.18'i okuyun PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight

Accountability draft Hiçbir şey otomatik olarak gönderilmez.

Network & certificates

Stored technical evidence

Network & DNS

Shared CDN edge

Resolved IP: 188.114.96.3
Network ASN: AS13335
Organization: Cloudflare, Inc.
Observed location: San Francisco, US
Server header: cloudflare

Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.

Ad sunucuları 2

khloe.ns.cloudflare.com
newt.ns.cloudflare.com

Location describes the IP network.

TLS sertifikası

Issuer: Let's Encrypt / YE2
Valid from: 2026-09-28 19:12:47
Valid until: 2026-12-27 19:12:46
Hostname coverage: Hostname coverage not recorded
Validity: Within stored validity dates
Collection time: 2026-10-16 04:02:06 UTC
Collection source: PhishDestroy collector

Certificate fingerprint

7454c04d3b8a1c6bb0142bba1ba97f86e39997b5e83da7afff98908f920dd767

Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.

viewdns.info · 188.114.96.3 rapiddns.io

Latest Classified Outcome 2026-10-16 01:59:06 UTC

Primary outcome Bilinmiyor reason: Probe Inconclusive 20% confidence

Attribution source: Current State Backfill

Evidence layers Availability: Unreachable Content: Unknown DNS: Stale Registration: Unknown

Latest HTTP observation Bilinmiyor Probe Inconclusive 20% 2026-10-16 01:59:06 UTC

RDAP registration Bilinmiyor

Observed timeline last reachable: 2026-10-16 01:59:06 UTC

Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.

Teknolojiler · 5 identified

Vue.js

JavaScript frameworks

HSTS

Güvenlik

Cloudflare Browser Insights

Analytics RUM

Cloudflare

CDN

HTTP/3

Miscellaneous

Detected via Cloudflare Radar · Wappalyzer engine

Bu Alan Adını Bildir Kanıt sunun ve başkalarını korumaya yardımcı olun

VirusTotal Analizi

3 / 92 güvenlik sağlayıcıları bu alanı işaretledi

View on VT

Last analyzed 2026-10-16 05:14:33 UTC First positive detection 2026-10-16 02:40:14 UTC Previous stored snapshot: 3 detections

alphaMountain.ai

Forcepoint ThreatSeeker

Fortinet

Site Performans Analizi

Google PageSpeed Insights — mobile performance audit of arcportal.icu · checked Oct 16, 2026

Good

Performance

FCP

1.54s

First Contentful Paint

LCP

1.95s

Largest Contentful Paint

CLS

Cumulative Layout Shift

TBT

0ms

Total Blocking Time

3.98s

Speed Index

Stored Capture Evidence 1 snapshot

Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.

Archived HTTP response HTTP 200

Requested URL: http://arcportal.icu/

Final URL: https://arcportal.icu/

Deposit USDC to Arc | Bridge USDC to Arc | ArcPortal

Deposit USDC to Arc and bridge USDC into the Arc network. Manage your USDC on Arc and access supported token swaps through ArcPortal.

Müdahale
HTTP 200

HTML body
530.6 KB

Compressed
67.5 KB

Links
1 internal · 11 external

Detected technologies

vuecloudflarereact

Selected response headers

Content-Type: text/html

Server: cloudflare

CF-Cache-Status: DYNAMIC

Content-Encoding: gzip

Security headers present

Strict-Transport-SecurityContent-Security-PolicyX-Content-Type-OptionsX-XSS-Protection

HSTS: observed DNSSEC: not observed WAF / firewall: observed Cloaking flag: not observed

Open Graph title: Deposit USDC to Arc | Bridge USDC to Arc | ArcPortal

Open Graph description: Deposit USDC to Arc and bridge USDC into the Arc network. Manage your USDC on Arc and access supported token swaps through ArcPortal.

Twitter card: summary_large_image

Saved response-header values · 18

alt-svc: h3=":443"; ma=86400
cast-mode: default
cf-cache-status: DYNAMIC
CF-RAY: a4b378310b5dd36a-FRA
Connection: keep-alive
Content-Encoding: gzip
Content-Security-Policy: frame-ancestors http: https:
Content-Type: text/html
Date: Fri, 16 Oct 2026 02:00:22 GMT
Last-Modified: Fri, 18 Sep 2026 02:08:12 GMT
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VdVpjhFOBQqcbTDBK9f%2Bsa2PUfQNQeuHSqHzghJFirF%2FuJhCGN3krBqti2HTH1MimrYRINeLqQEdiswlIQ9DuvWLAH79qvSI15mibC7KeZ33wACJgKDZyFWzqHv66gVJ"}]}
Server: cloudflare
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Transfer-Encoding: chunked
Vary: accept-encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

Values retained by the collector; long values may be shortened during collection.

Crawler & disclosure files

Site configuration evidence

3 · file checks

Stored file checks, including unavailable and invalid responses. Retained contents and paths appear where available.

robots.txt

Unverified (legacy)

/robots.txt

HTTP response: 301
Observed at: 2026-10-16 02:00:22 UTC
Kaynak: legacy scan archive

A legacy response is stored, but it does not establish whether the file exists.

Sitemap

Unverified (legacy)

/sitemap.xml

HTTP response: 301
Observed at: 2026-10-16 02:00:22 UTC
Kaynak: legacy scan archive

A legacy response is stored, but it does not establish whether the file exists.

security.txt

Unverified (legacy)

/.well-known/security.txt

HTTP response: 301
Observed at: 2026-10-16 02:00:22 UTC
Kaynak: legacy scan archive

A legacy response is stored, but it does not establish whether the file exists.

Registration & observation details1

Availability observations

Last reachable observation: 2026-10-16 01:59:06 UTC

An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.

Tespit ve kaçınma analizi

Gizleme ve trafik dağıtımı kontrolü

Henüz taranmadı Henüz tarayıcı ile tarayıcı arası bir fark kaydedilmemiştir

Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.

Kaydedilmiş gizleme bayrağı: Henüz taranmadı
Yönlendirme yakalama: Local 2026-10-16 02:00:22 UTC tarihinde arşivlendi

TDS'da canlı parmak izi kontrolü

Yedi Keitaro göstergesi ve tarayıcı ile bot karşılaştırması. Yeni tarama yalnızca düğmeye bastığınızda başlar.

İstek üzerine

Kaydedilmiş canlı kontrol sonucu yok.

Forensic History & Detection Timeline

ThreatLifecycleTelemetry

This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.

Threat First Observed 2026-10-16 01:59:06 UTC
Source: PhishDestroy monitoring
Event details
Domain ingestion complete. Initial state is marked as alive pointing to IP 188.114.96.3.

Stored observation history2

Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.

2026-10-16 01:59:06 UTC
Availability monitor · Recorded state
Bilinmiyor

probe_inconclusive
2026-10-16 01:59:06 UTC
Availability monitor · First collection record
Erişilebilir

Tehdit Müdahale Pipeline

Keşif

Analysis

Monitoring

10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.

Tehdit Alındı

arcportal.icu tespit edildi ve kapsamlı analiz için sıraya alındı

16.10.2026

URLScan.io Capture

Kaydedildi URLScan report with capture artifacts

16.10.2026

Cloudflare Radar Report

A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.

VirusTotal

3/92 recorded on VirusTotal

16.10.2026

Engellenenler Listesi Algılama

Şu kaynakta bulunur: 2 blocklists: MetaMask, SEAL

16.10.2026

OTX Community References

4 community publication references on AlienVault OTX. References are not vendor verdicts and are excluded from the evidence score.

16.10.2026

Brand Impersonation

Impersonation of MetaMask

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

16.10.2026

Technical Analysis Recorded

Rapor, depolanan teknolojiyi veya adli analiz sonuçlarını içerir.

16.10.2026

DestroyList Yayınlandı

Listed in the public PhishDestroy/DestroyList repository

16.10.2026

How we investigate & report

Public scans, evidence and abuse channels

We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.

01Public scans & evidence collection10 sources and tool groups

urlscan.io Screenshot · DOM · HTTP

Capture the rendered page, requests and visible infrastructure.

VirusTotal Multi-engine verdicts

Compare the available engine results and retain the analysis timestamp.

Google Safe Browsing Transparency Report

Check whether Google currently lists the URL as unsafe.

Cloudflare Radar DNS · certificates · categories

Inspect a public scan and its recorded network and classification data.

AlienVault OTX Threat-intelligence pulses

Look for indicator references and related community intelligence.

Wayback Machine Historical evidence

Compare archived captures and preserve historical context.

abuse.ch ThreatFox IOC correlation

Look for matching indicators and associated threat records.

crt.sh Certificate Transparency

Inspect certificate records and related hostnames.

DNS Security Filters Quad9 · AdGuard · CleanBrowsing

Compare security resolver responses and record observed blocking.

Web-Check Surface inspection

Inspect the public DNS, TLS, HTTP and technology surface.

02Abuse reports & follow-upRegistrar, hosting and security channels

Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.

Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.

GoogleSafe Browsing GoogleWeb Risk MicrosoftSmartScreen VirusTotalURL analysis CloudflareRadar / abuse reporting YandexSafe Browsing URLScan.ioPublic scan ESETSample / URL submission BitdefenderURL submission NortonSafe Web SymantecSite İncelemesi AviraURL reporting Avast / AVGURL reporting KasperskyOpenTIP Dr.WebOnline scanner NetcraftAbuse reporting PhishTankCommunity reporting APWG eCXPhishing intelligence PhishStatsPublic feed Phish.ReportHosting abuse SpamhausDomain reputation PolySwarmMulti-engine analysis CheckPhishURL scan QutteraMalware scan URLqueryBrowser analysis Criminal IPAsset intelligence CRDFThreat Center ScamadviserReputation check MyWOTCommunity reputation

Benzer alan adları

79 kayıtlı benzer alan adı

etamask.io omission Dahili rapor meetamask.io repetition Dahili rapor megamask.io replacement Dahili rapor metam.ask.io subdomain Dahili rapor metamaak.io replacement Dahili rapor metamadk.io replacement Dahili rapor metamaks.io transposition Dahili rapor metamassk.io insertion Dahili rapor metamsask.io insertion Dahili rapor metamssk.io replacement Dahili rapor metanask.io homoglyph Dahili rapor metanmask.io homoglyph Dahili rapor

Tümünü göster (67)

metasmask.io insertion Dahili rapor metramask.io insertion Dahili rapor mewtamask.io insertion Dahili rapor mmetamask.io homoglyph Dahili rapor mtamask.io omission Dahili rapor mwetamask.io insertion Dahili rapor nmetamask.io homoglyph Dahili rapor metamark.io bitsquatting Dahili rapor metamaskj.io addition Dahili rapor metammask.io homoglyph Dahili rapor metamnask.io homoglyph Dahili rapor emtamask.io transposition m-etamask.io hyphenation meamask.io omission meatmask.io transposition meramask.io replacement mertamask.io insertion metaamask.io repetition metaamsk.io transposition metaask.io omission metalmask.io insertion metamaask.io insertion metamadsk.io insertion metamaek.io replacement metamak.io omission metamas.io omission metamasak.io insertion metamasdk.io insertion metamask-io.com various metamasl.io replacement metamasm.io replacement metamsak.io transposition metamsk.io omission metamusk.io vowel-swap metamzsk.io replacement metarnask.io homoglyph metmaask.io transposition metmask.io omission metsamask.io insertion metsmask.io replacement mettamask.io repetition metwmask.io replacement metyamask.io insertion metzmask.io replacement meyamask.io replacement meytamask.io insertion mitamask.io vowel-swap mnetamask.io homoglyph mretamask.io insertion mrtamask.io replacement mstamask.io replacement mteamask.io transposition mwtamask.io replacement rnetamask.io homoglyph matamask.io bitsquatting mdtamask.io bitsquatting metamasi.io bitsquatting metamasj.io bitsquatting metamaska.io addition metamaskk.io addition metamaskl.io addition metamaso.io bitsquatting metamesk.io bitsquatting metamqsk.io bitsquatting metemask.io bitsquatting netamask.io homoglyph xn--metamas-bhb.io homoglyph

Kanıtlar ve Dış Raporlar

Güvenlik Analizi

URLScan Analyzed VirusTotal 3 det. ChainPatrol URLQuery Report stored SSL Laboratuvarlar Hostname coverage not recorded CF Radarı Raporu aç OTX 4 refs WOT ScamAdviser Kara Liste Kontrol Aracı URLVoid Sucuri SiteCheck MDN Gözlemevi

OSINT ve İstihbarat

Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Hudson Kayası Sign-in search IntelX crt.sh Sertifikalar WHOIS Wayback

DNS ve Ağ

nslookup.io DNS bgp.tools ASN /Güzergâh

SEO ve Alan Adı

SpyFu Moz DA/PA Ahrefs Geri bağlantılar

Derinlemesine Analiz

Help & reporting

Bu Siteden Etkilendiniz mi?

5 evidence signal groups linked 0 stored notification records Doğrulanmamış

Listed domains receive at least one abuse report; this entry has no retained notification history.

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.

Immediate steps Find reporting contacts

Official reporting routes

FBI IC3

Amerika Birleşik Devletleri'nde internet bağlantılı suçları bildirin

Federal tips line1-800-CALL-FBI

Report online

Europol

AB ülkeniz için resmi raporlama kanalını bulun

National police directory

Find your country

Action Fraud

İngiltere, Galler ve Kuzey İrlanda'da dolandırıcılık ve siber suçları bildirin

Contact centre0300 123 2040

Report online

PhishDestroy listing review Bir kolluk kuvveti raporu değil

Alan Adı İtirazı

Bu alanın sahibiyseniz ve girişin hatalı olduğunu düşünüyorsanız inceleme isteğinde bulunun

Kurtarma dolandırıcılarına dikkat edin! Suçlular, araştırmacı, avukat veya kurtarma görevlisi gibi davranarak mağdurlarla tekrar iletişime geçebilir. Peşin ücret ödemeyin veya kimlik bilgilerinizi paylaşmayın. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →

Yerel Yetkililere Bildirin

resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.

97 ülke rehberi

Template-based draft · optional AI wording assistance requires separate consent

Yapay zeka destekli taslak — olay ayrıntıları yapay zeka sağlayıcısı tarafından işlenir · Kendiniz inceleyin ve gönderin

After a phishing incident

Mağdurlara Yönelik Öneriler ve Tavsiyeler

Choose the steps that match what you shared. Keep a copy of this report alongside your own records.

Hemen ne yapmalıyım?

Acil

Stop using the suspicious site. Open the real service through its official app or an address you already trust.

Tüm şifreleri değiştir — e-posta, Exchange hesapları, aynı şifreyi paylaşan her şey
2FA'yı etkinleştir bir kimlik doğrulama uygulaması kullanarak (SMS değil). SMS tabanlı kurtarma özelliğini devre dışı bırakın
Kartları dondur eğer kimlik avı sitesine banka bilgilerinizi girdiyseniz

Raporum için hangi bilgileri toplamalıyım?

FBI yönergeleri

Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗

Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
Kesin tarih ve saatler — her işlemin ve dolandırıcıyla ilk teması
Ekran görüntüleri — dolandırıcılık amaçlı web siteleri, sohbet mesajları, e-postalar, cüzdan işlemleri, sosyal medya
Tüm URL'ler ve alan adları dolandırıcı tarafından kullanılan (şunlar dahil) arcportal.icu)
İletişim — dolandırıcının kullandığı e-postalar, kısa mesajlar, telefon numaraları ve kullanıcı adları

Tüm ayrıntıları bilmeseniz bile — yine de şikayette bulun. Kısmi bilgiler de soruşturmalara yardımcı olmaktadır.

Bu dolandırıcılığı nereye bildirmeliyim?

FBI IC3 — İnternet Suçları Şikayet Merkezi (ABD federal bildirim sistemi)
Europol — Avrupa siber suç ihbarları (AB)
Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
Yerel polis — hemen harekete geçemese bile resmi bir kayıt oluşturur

A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.

How do phishing scams typically work?

Sahte web siteleri — alan adları hafifçe değiştirilmiş, orijinal sitelerin piksel düzeyinde birebir kopyaları
Domuz kesimi — Telegram, WhatsApp ve flört uygulamaları aracılığıyla haftalarca süren bir süreçte kurulan güvenin ardından paranın çalınması
Geri kazanım dolandırıcılıkları — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
Yapay zeka destekli dolandırıcılıklar — deepfake’ler, otomatik kimlik avı ve yapay zeka tarafından oluşturulan siteler, dolandırıcılığın tespit edilmesini zorlaştırıyor

Gelecekte kendimi nasıl koruyabilirim?

Resmi siteleri yer imlerine ekle — e-postalardaki, özel mesajlardaki veya reklamlardaki bağlantılara asla tıklamayın
Etki alanlarını doğrula — kontrol et PhishDestroy etkileşime geçmeden önce. HTTPS'yi, yazım hatalarını ve alan adının yaşını kontrol edin
"Gerçek olamayacak kadar iyi" = dolandırıcılık — garantili getiri, ünlülerin desteği, acil son tarihler

Further guidance: NIST · phishing response FBI IC3 · reports & evidence FTC · recovery scams

Herhangi Bir Alan Adını Kontrol Et

Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi

Şimdi Tara

Oltalama Olayını Bildir

Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun

Bildir

Canlı Tehdit Akışı

Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri

İzle

Gelişmelerden Haberdar Olun, Güvende Kalın

Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin

Canlı Tehdit Akışı Bu İlanı İtiraz Et

Read the evidence in context

Bu Rapor Hakkında: arcportal.icu

Bu rapor, PhishDestroy'un kullanabileceği en son saklanan kanıtları sunar. Kaynak zaman damgaları mümkün olan yerlerde gösterilir; Stok durumu ve satıcı kararları toplama sonrasında değişebilir.

Yakalanan site “Deposit USDC to Arc | Bridge USDC to Arc | ArcPortal” sayfa başlığını gösteriyordu ve MetaMask'nin kimliğine bürünüyor olabilir.

2026-10-16 05:14:33 UTC itibarıyla arcportal.icu, 3 güvenlik motorlarından tespitler aldı.

Each source records a particular observation. A screenshot, an available website, or a result with no detections does not establish that a site is safe. Source results can change after they are collected.

Bu listenin hatalı olduğunu düşünüyorsanız itirazda bulunmak. Metodolojimiz hakkında bilgi edinmek için SSS sayfası adresini ziyaret edin.

HTML · IFRAME

Bu Raporu Yerleştir

Bu tehdit bilgisini web sitenizde veya blogunuzda paylaşın

embed.html

<iframe
  src="https://phishdestroy.io/tr/embed/domain/arcportal.icu"
  title="PhishDestroy threat report for arcportal.icu"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

arcportal.icu

Additional indicators at a glance

Source evidence

VirusTotal

Public blocklists

URLQuery

OTX

CF Radarı

URLScan capture

URLScan verdict

Google Safe Browsing

Kanıt özeti

Observed indicators

Genel Engelleme Listesi Durumu

Domain details

ShortDot zone evidence

Akreditasyon ve RAA bağlamı

Registrar accreditation and DNS abuse obligations

Network & certificates

Ad sunucuları 2

Latest Classified Outcome 2026-10-16 01:59:06 UTC

VirusTotal Analizi

Site configuration evidence

Availability observations

Gizleme ve trafik dağıtımı kontrolü

Forensic History & Detection Timeline

Tehdit Müdahale Pipeline

Public scans, evidence and abuse channels

Benzer alan adları

İlgili Altyapı ve Raporlar

Paylaşılan Cloudflare ucuna ilişkin diğer raporlar 6

Aynı kayıt kuruluşu: PDR 6

Son tehdit raporları 6

Kanıtlar ve Dış Raporlar

Bu Siteden Etkilendiniz mi?

Official reporting routes

Yerel Yetkililere Bildirin

Mağdurlara Yönelik Öneriler ve Tavsiyeler

Herhangi Bir Alan Adını Kontrol Et

Oltalama Olayını Bildir

Canlı Tehdit Akışı

Gelişmelerden Haberdar Olun, Güvende Kalın