manage[.]arc[.]moe

This domain, manage.arc.moe, is identified as a high-risk phishing site designed to impersonate the ARC TestNet platform. Analysis indicates the domain targets users involved in blockchain or cryptocurrency activities, attempting to harvest login credentials, private keys, or other sensitive information through deceptive interfaces. The page title, 'ARC TestNet,' mimics legitimate test network portals, increasing the likelihood of successful social engineering attacks against unsuspecting victims. Evidence supporting this assessment includes detection by 14 out of 95 security vendors on VirusTotal, registration through Dynadot Inc, and a creation date of April 08, 2026, which suggests an unusually forward-dated registration likely intended to evade immediate scrutiny. The domain appears on three security blocklists and is flagged by Google Safe Browsing for 'SOCIAL_ENGINEERING.' Infrastructure analysis reveals it resolves to the IP address 103.127.240.180 and uses a Let's Encrypt SSL certificate, which is commonly exploited by threat actors to lend a false sense of legitimacy. Users who have visited manage.arc.moe or interacted with its content should immediately revoke any credentials or private keys entered on the site. Monitor associated accounts for unauthorized activity and consider re-securing wallets or testnet environments by generating new keys. If the domain was accessed via a browser, clear cached data and reset any saved passwords. Organizations should update blocklists to include this domain and its resolving IP to prevent further exposure. Given its current offline status, continued monitoring for reactivation or related infrastructure is recommended.