arc-confidence-dashboard-v2[.]vercel[.]app

Analysis of the domain arc-confidence-dashboard-v2.vercel.app indicates active phishing infrastructure targeting ARC Institutional Confidence Dashboard users. The domain, registered on June 16, 2026, through Vercel Inc., currently resolves to IP 216.198.79.67, hosted under the autonomous system of Cypress Communications, LLC in the United States. The site returns an HTTP 200 status, signaling operational availability, and presents a page title matching the legitimate ARC Institutional Confidence Dashboard, suggesting an intent to deceive users familiar with that platform. Infrastructure review reveals the use of Chart.js, Cloudflare, jsDelivr, and cdnjs, alongside HSTS implementation, which may be leveraged to enhance perceived legitimacy or evade basic detection mechanisms. The SSL certificate is issued by Google Trust Services, a common practice among both legitimate and malicious sites. Nameserver records are absent, a potential indicator of misconfiguration or deliberate obfuscation. Detection data shows the domain is flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL. A scan by Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk classification. While the exact content of the phishing page remains unanalyzed, the combination of a targeted page title, recent registration, and detection by multiple security vendors confirms malicious intent. Defenders should prioritize blocking the domain and its resolving IP at network and endpoint levels. Given the use of Vercel's hosting platform, monitoring for newly deployed subdomains under vercel.app with similar naming patterns may aid in early detection of related campaigns. No evidence currently links this domain to a specific phishing kit or broader threat actor infrastructure, though the targeting of institutional confidence dashboards aligns with credential harvesting objectives.