The .arpa domain is being abused to host phishing content on domains that should not resolve to an IP address, but do.