rpc-decimated[.]pages[.]dev

PhishDestroy identifies rpc-decimated.pages.dev as a fraudulent login portal designed to steal user credentials and personal data. This domain mimics a legitimate service to trick visitors into entering sensitive information, potentially leading to account takeovers or financial fraud. The site leverages Cloudflare’s infrastructure to appear legitimate, exploiting trust in well-known providers to bypass initial suspicion. Users who interact with this page risk exposing login credentials, payment details, or other personal information to cybercriminals, who may then use it for identity theft or unauthorized access to accounts.

This domain was flagged due to its active status and association with social engineering tactics, as confirmed by Google Safe Browsing. The domain resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc., with Google Trust Services providing its SSL certificate to enhance its deceptive appearance. Notably, VirusTotal currently shows 16 out of 95 security vendors detecting this threat, underscoring the challenge of identifying such domains without proactive monitoring or expert analysis.

If you have visited rpc-decimated.pages.dev, immediately cease any interactions with the site and avoid entering any personal or financial information. Check your accounts for unusual activity, particularly those linked to the service this domain impersonates. Use a reputable password manager to verify login URLs and enable two-factor authentication where possible. Report the domain to your organization’s security team or to PhishDestroy for further analysis. Avoid clicking on links from unsolicited emails or messages, and verify the legitimacy of websites by checking for HTTPS certificates and consistent branding before entering sensitive data.