# arb.bot.camp — MALICIOUS

> Discover why arb.bot.camp is under investigation for phishing. Learn its risks and technical details before interacting with this domain.

## Summary
PhishDestroy identifies arb.bot.camp as an active domain associated with generic phishing threats. Although it currently lacks explicit vendor flags, its classification arises from contextual threat intelligence and suspicious usage patterns. The domain remains under thorough scrutiny to determine its full malicious intent and potential impact.

Technically, arb.bot.camp resolves to the IP address 209.38.204.76. Despite a clean VirusTotal scan with zero detections across 95 security vendors, this absence of alerts does not guarantee safety. The domain's infrastructure, combined with its recent registration and suspicious naming conventions, aligns with common phishing tactics. Investigators are monitoring its DNS resolution and network connections to uncover further indicators of compromise.

The domain status is active and under investigation, prompting caution in any interaction. PhishDestroy recommends heightened awareness and avoidance of any communications or transactions involving arb.bot.camp until conclusive findings emerge. Ongoing monitoring and intelligence sharing will support timely identification of potential threats stemming from this domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Target brand: Kraken
- Page title: Kraken Dashboard - Giriş

## Domain Intelligence
- Registered: 2026-03-06 19:07:01
- Registrar: GoDaddy.com, LLC
- Country: US
- IP: 209.38.204.76
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS14061 DigitalOcean, LLC
- Nameservers: ["ns15.domaincontrol.com", "ns16.domaincontrol.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc43b-5068-707a-9b62-6a3f5ec9084b.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/abb69467-c4eb-47aa-beb3-6b0d13d6613c
- Wayback Machine: https://web.archive.org/web/https://arb.bot.camp
- PhishDestroy: https://phishdestroy.io/domain/arb.bot.camp/
- LLM endpoint: https://phishdestroy.io/domain/arb.bot.camp/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/arb.bot.camp/
Last updated: 2026-03-19