arkham[.]trade

The domain arkham.trade has been identified as a generic phishing site, posing an elevated risk to users. While the site does not impersonate any specific brand or use a known drainer kit, it has been flagged as potentially malicious by 2 of 95 vendors on VirusTotal, including Fortinet and SOCRadar. The domain is currently taken offline, which may indicate that it has been shut down due to security concerns or that the operators have moved on to other targets. Users should exercise caution and avoid interacting with arkham.trade until further notice.

arkham.trade was registered through NiceNIC International Group Co., Limited on March 01, 2026. The domain resolves to the IP address 172.67.141.128, which is located in the US and is part of AS13335 Cloudflare, Inc. The site has been added to 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. However, it has not been flagged by Google Safe Browsing, and no SSL certificate is associated with the domain. These technical indicators suggest that the site may have been used for phishing activities, but its current offline status limits further analysis.

If a user has interacted with arkham.trade, they should take immediate steps to protect their information and assets. For generic phishing threats, users should change their passwords, enable two-factor authentication, and monitor their accounts for any signs of unauthorized activity. Additionally, users can report the domain to their security software provider, as well as to any relevant blocklists or authorities to help prevent further phishing incidents.