manual-rpcsync[.]pages[.]dev

The domain manual-rpcsync.pages.dev is currently flagged as a high-risk crypto wallet phishing site. Analysis indicates it is actively impersonating wallet services under the guise of 'Linkup Affixs,' a likely fabricated or spoofed brand name. The domain remains operational, posing a direct threat to users attempting to access cryptocurrency wallet interfaces or related financial services. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.44.205. It was created on June 15, 2026, an anomalous future date suggesting potential domain spoofing or misconfiguration. Security vendor detections on VirusTotal report 14 of 95 engines flagging the domain as malicious. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which may lend a false sense of security to unsuspecting users. The domain appears on one security blocklist, indicating limited but confirmed malicious classification. Current monitoring confirms the domain remains active, with the page title 'Wallets | Linkup Affixs' serving as the primary lure. The combination of a future creation date, confirmed phishing content, and active resolution to a Cloudflare-hosted IP elevates the risk profile. Organizations and individuals are advised to block the domain at the DNS or proxy level, revoke any cached SSL certificates associated with it, and conduct internal audits for exposure. End users should avoid interacting with the site and report any credential submissions to their security teams for immediate remediation.