bt[.]arbitrum[.]im

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

Analysis of the domain bt.arbitrum.im shows that it is currently active and classified as a generic phishing threat. The domain resolves to the IPv4 address 27.124.46.18 and is served by a Let's Encrypt certificate identified as YE1. Nameserver records point to a6.share-dns.com and b6.share-dns.net, both commonly used in fast‑flux or shared hosting environments. VirusTotal reports that the domain has been examined by 91 scanning engines, none of which have raised a detection at the time of assessment; however, the absence of detections does not constitute proof of legitimacy. The infrastructure details indicate no publicly disclosed affiliation with a known organization, and no additional context such as a page title or targeted brand has been provided. Because the domain is flagged as a generic phishing vector and remains active, defenders should treat any communications originating from or referencing bt.arbitrum.im as potentially malicious. Recommended mitigations include blocking the domain at network perimeter devices, monitoring DNS queries for the associated IP and nameservers, and updating endpoint protection rules to include the observed indicators. Further investigation is required to determine the exact payload or credential‑harvesting mechanisms employed by the site.