dexrpdapps[.]pages[.]dev

This domain, dexrpdapps.pages.dev, is actively engaged in cryptocurrency wallet credential harvesting under the guise of a legitimate MainNet Project. The phishing infrastructure presents a fraudulent interface designed to deceive users into disclosing private keys, seed phrases, or wallet login credentials, which are then exfiltrated to attacker-controlled endpoints. The site employs social engineering tactics, including urgency prompts and fake transaction confirmations, to manipulate victims into compromising their digital assets. Analysis of the page structure reveals embedded JavaScript that captures keystrokes and form submissions, while network traffic inspection indicates data transmission to external servers not associated with authentic blockchain services. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 04, 2026, and currently resolves to the IP address 188.114.97.3, hosted on AS13335. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites due to its accessibility. Detection metrics show the domain is flagged by 1 out of 95 security vendors on VirusTotal, while it appears on 2 distinct security blocklists, including PhishDestroy and ScamSniffer. The page title, "MainNet Project," is deliberately crafted to mimic legitimate decentralized application (dApp) platforms, increasing the likelihood of successful deception among users familiar with blockchain terminology. Users who have interacted with dexrpdapps.pages.dev should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. All credentials entered on the site must be considered compromised, and any associated devices should undergo a full malware scan to detect potential secondary infections. If financial losses occurred, victims should report the incident to relevant law enforcement or cybercrime units, providing transaction hashes and timestamps for further investigation. To mitigate future risks, users are advised to verify domain authenticity through official project documentation and employ hardware wallets or multi-signature solutions for high-value transactions.