arc-vote-fat[.]pages[.]dev

Analysis of the domain arc-vote-fat.pages.dev indicates active phishing infrastructure targeting users of the Arc Network, as suggested by the page title 'Arc Vote — On Arc Network.' The domain was registered on June 6, 2026, through Cloudflare, Inc., and is currently resolving to the IP address 172.66.44.154, which is associated with AS13335 (Cloudflare, Inc.) in the United States. The domain utilizes Cloudflare nameservers (kanye.ns.cloudflare.com and mallory.ns.cloudflare.com) and is secured with an SSL certificate issued by Google Trust Services (WE1). Despite the use of security technologies such as HSTS and HTTP/3, the domain has been flagged by three independent security blocklists, including PhishDestroy, MetaMask, and SEAL, and holds a trust score of 0/100 from Gridinsoft. Infrastructure analysis reveals no detections from 91 security vendors in a recent scan, though the absence of detections does not confirm the domain's safety. The domain remains active as of July 12, 2026, and returns an HTTP 200 status, indicating it is operational. Defenders should treat this domain as high-risk due to its association with known phishing indicators and its use of a page title that aligns with a targeted brand. No further details regarding the specific phishing kit or additional brand impersonation are available at this time. Network-level blocking or monitoring of connections to 172.66.44.154 is recommended for organizations seeking to mitigate exposure.