arbgovernance[.]com

The domain arbgovernance.com was registered on May 11 2026 through GoDaddy.com, LLC. It is currently classified as a high‑risk brand‑impersonation site targeting the ARB brand and is active as of July 12 2026. The page title returned by the web server is “ARB Governance”, matching the legitimate brand’s naming convention and designed to lure victims into credential submission. Infrastructure analysis shows the domain resolves to IP address 76.223.105.230, which is associated with an AWS Global Accelerator endpoint located in the United States. Authoritative name servers are ns29.domaincontrol.com and ns30.domaincontrol.com, both operated by GoDaddy. The site serves over HTTPS using a GoDaddy Secure Certificate Authority – G2 certificate, and HTTP requests receive a 200 OK response. Threat intelligence indicates the site is being used for phishing_login attacks that masquerade as official ARB governance portals. The Gridinsoft trust score is 0 out of 100, and the domain appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX has referenced the domain in one pulse, and VirusTotal reported a single detection out of ninety‑five scanners, confirming at least one security vendor flags the site as malicious. Defenders should immediately block outbound and inbound traffic to arbgovernance.com and its resolved IP address, add the domain to internal blacklist feeds, and monitor DNS queries for the associated name servers. Incident response teams are advised to alert users of the ARB brand about the fraudulent login page, and threat‑intel sharing channels should be updated with the observed indicators to improve detection across the ecosystem.