arqustik[.]com

PhishDestroy identifies arqustik.com as a credential-harvesting domain actively used in phishing campaigns, posing significant risks to unsuspecting users. This domain was flagged due to its involvement in fraudulent login pages designed to steal credentials for popular services, including financial platforms and email accounts. The domain exhibits multiple suspicious characteristics: it was registered through Hello Internet Corp, resolved to IP 44.211.14.38, and holds a Let's Encrypt SSL certificate—often leveraged to appear legitimate. Notably, arqustik.com was created on June 01, 2015, and despite its age, it remains unflagged on VirusTotal with 0 detections out of 95 scanners as of the latest analysis. Its prolonged activity without intervention raises concerns about its potential use in ongoing phishing operations. Users who may have interacted with this domain should immediately review their credentials for any exposed accounts, enable multi-factor authentication where possible, and scan their devices for malware. If login details were entered on arqustik.com, change passwords immediately and monitor accounts for unauthorized access. Organizations should consider blocking this domain at the network level to prevent further exposure.