rpcnodeconnct[.]pages[.]dev

The domain rpcnodeconnct.pages.dev has been identified as a site used for generic phishing activity. There is no evidence of impersonation of any specific brand or use of a drainer kit. The site has since been taken offline, but while it was active, it posed an elevated risk to users who may have been exposed to phishing attempts through this domain. Users searching for information about rpcnodeconnct.pages.dev should be aware that it is not a safe site and has been associated with phishing scams.

Technical analysis shows that rpcnodeconnct.pages.dev was registered through Cloudflare, Inc. on November 08, 2025, and resolved to the IP address 2606:4700:310c::ac42:2fc5, which is located in the US under AS13335 Cloudflare, Inc. The domain appeared on one security blocklist, specifically PhishDestroy, and was flagged by 2 of 95 security vendors on VirusTotal, including ADMINUSLabs and Fortinet. Google Safe Browsing did not flag the domain. The page title observed was 'RPC-Dapps,' and there was no SSL certificate present during the investigation.

Users who interacted with rpcnodeconnct.pages.dev should take immediate precautions. If any credentials or sensitive information were entered on the site, it is recommended to change passwords for affected accounts, enable two-factor authentication, and monitor accounts for signs of unauthorized activity or fraud. Suspicious domains like rpcnodeconnct.pages.dev can be reported to relevant security services and blocklists to help prevent further phishing incidents.