arc-subscription[.]pages[.]dev

This domain arc-subscription.pages.dev is assessed as a generic phishing infrastructure designed to impersonate a subscription-related service associated with Arc Network branding. The page title 'Arc Subscription — On Arc Network' indicates a social engineering attempt to present legitimacy and induce user authentication or payment input. The objective is consistent with credential harvesting or session theft through fake subscription workflows.

Technical analysis shows VirusTotal detection ratio of 0/95, indicating no antivirus engine flag at time of review despite external blocklist presence. The domain was created on June 06, 2026 and is hosted via Cloudflare Pages infrastructure. It resolves to IP 172.66.47.14. The registrar/hosting provider is Cloudflare Pages. The domain appears on 3 security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL.

If a user has visited this domain, immediate risk mitigation steps are required. Credentials entered on the page should be considered compromised and must be changed across all affected services. Any connected wallets or authentication tokens should be revoked. System scans should be performed to detect potential malware or browser persistence mechanisms. Network-level blocking of IP 172.66.47.14 and domain-level filtering should be implemented. Continuous monitoring is recommended due to active status and absence of VirusTotal detections.