# devnetrpc.pages.dev — SUSPICIOUS > PhishDestroy flags devnetrpc.pages.dev as a crypto drainer phishing page. 0/95 VirusTotal detections. Verify URLs before connecting any wallet. ## Summary PhishDestroy identifies devnetrpc.pages.dev as an active crypto drainer campaign impersonating DevNet RPC endpoints. The domain poses as a legitimate development tool to trick users into authorizing malicious cryptocurrency transactions. Based on observed infrastructure and impersonation patterns, this site should be treated as a high-risk threat to digital asset holders. This domain was flagged with zero detections out of 95 VirusTotal engines, registered through Cloudflare, Inc. and resolving to IP 188.114.96.3 which hosts multiple lookalike services. The *.pages.dev subdomain space, operated by Google Trust Services, continues to be abused for crypto phishing due to low barrier of entry and SSL credibility through legitimate issuance. Creation date and blocklist inclusion remain under investigation, but current trust scores indicate elevated risk without prior enforcement actions. Users must never connect wallets or enter seed phrases on devnetrpc.pages.dev. Always verify the exact domain spelling against official documentation and use PhishDestroy’s real-time verification tool before interacting with any RPC or development endpoint. Report this domain immediately if encountered to help disrupt ongoing campaigns. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 188.114.96.3 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/62b22040-460f-4860-a46c-511e35a7adab - PhishDestroy: https://phishdestroy.io/domain/devnetrpc.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/devnetrpc.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/devnetrpc.pages.dev/ Last updated: 2026-03-22