registration-arc[.]net

This domain, registration-arc.net, is flagged as a high-risk brand impersonation targeting Google. The domain was created on November 12, 2025, and is currently active as of July 12, 2026. Analysis indicates that the domain is being used in email scams, which is a common vector for phishing attacks. The domain resolves to the IP address 142.250.186.164, located in the United States and associated with AS15169 Google LLC. This suggests that the attackers may be leveraging legitimate Google infrastructure, possibly through compromised accounts or services, to enhance the credibility of their scam. The domain has an SSL certificate issued by Google Trust Services, further complicating detection and adding a layer of perceived legitimacy. However, the HTTP status code 502 indicates that the server is currently experiencing issues or is intentionally down, which could be a tactic to avoid immediate detection by security scanners. The domain is blocked by PhishDestroy and appears on one security blocklist, indicating a level of awareness among security professionals. The Gridinsoft trust score of 0/100 underscores the domain's high-risk status. Defenders should be vigilant and monitor any email communications that reference this domain, as it is likely being used to deceive users into divulging sensitive information. Given the high risk and the use of a reputable SSL certificate, it is crucial to implement multi-factor authentication (MFA) and educate users about the dangers of phishing, particularly those impersonating well-known brands. Regularly updating security policies and conducting phishing simulations can help mitigate the risk of successful attacks.