cexrpc[.]pages[.]dev

This domain was identified as a high-risk phishing site targeting users of decentralized applications and cryptocurrency wallets. The page masqueraded as a legitimate decentralized application platform under the title 'CexRpc Decentralized DApp,' attempting to deceive visitors into entering sensitive wallet credentials or private keys. Such schemes typically lead to immediate asset theft once credentials are exposed, with attackers draining funds from connected wallets without further user interaction. Analysis indicates the domain was registered through Cloudflare, Inc. on March 29, 2026, and resolved to the IP address 188.114.97.3. Detection engines on VirusTotal flagged the domain with 12 out of 95 security vendors marking it as malicious. The site was listed on four distinct security blocklists and received a trust score of 0 out of 100 from Gridinsoft. The SSL certificate was issued by Google Trust Services, and the site employed several technologies including jsDelivr, HSTS, crypto-js, cdnjs, and Cloudflare infrastructure, which are commonly used to enhance legitimacy and evade detection. Users who visited cexrpc.pages.dev or interacted with its content should immediately disconnect any connected wallets from the site and revoke any active permissions granted to it. It is critical to transfer assets to a new, secure wallet if credentials or private keys were entered. Monitor all linked accounts for unauthorized transactions and enable enhanced security measures such as hardware-based authentication. The domain has since been taken offline, but related infrastructure may persist; users should remain vigilant for similar phishing attempts using comparable naming conventions or hosting patterns.