app[.]arcwthbnkfin[.]com

This domain, app.arcwthbnkfin.com, is flagged as an active phishing site targeting online banking users. Analysis indicates the domain was registered on February 21, 2026, through Dynadot Inc, and currently resolves to the IP address 198.12.93.82, hosted on AS36352 (HostPapa) in the United States. The page title, 'Breed Banking, Easy Acount in Minutes - Online Banking,' explicitly suggests an attempt to impersonate a financial institution, though no legitimate entity by that name has been confirmed in available intelligence. The domain appears on one security blocklist and is classified as a banking scam by at least one vendor. Infrastructure analysis reveals the domain uses nameservers 5014.ns1.abovedomains.com and 5014.ns2.abovedomains.com, a pattern consistent with domains registered for short-term malicious campaigns. The SSL certificate is rated R10, indicating a low-trust or potentially self-signed certificate, which is atypical for legitimate financial services. A VirusTotal scan reports that one out of 95 security vendors flags the domain as malicious, while Gridinsoft assigns a trust score of 0/100, further supporting its classification as high-risk. The domain remains active as of July 12, 2026, with an HTTP status of 200, confirming the site is accessible. While the exact content and functionality of the site have not been analyzed, the combination of its page title, registration details, and infrastructure strongly suggests it is designed to harvest banking credentials or other sensitive financial information. Defenders should treat this domain as malicious and prioritize blocking it at the DNS or network level. Additional monitoring of the hosting IP (198.12.93.82) and associated nameservers may reveal related malicious domains.