rpcconnect[.]info

PhishDestroy identifies rpcconnect.info as an active phishing domain impersonating an RPC portal service, posing an elevated threat to users seeking remote procedure connections. This domain (risk level: elevated) leverages deceptive branding to harvest authentication credentials or deploy malware under the guise of legitimate RPC toolkits. Users attempting access to this domain are at high risk of credential theft or system compromise.

This domain was flagged by 5 of 95 VirusTotal security vendors, resolving to IP address 195.179.236.67. Registered on March 25, 2026 through HOSTINGER operations UAB, it utilizes a Let's Encrypt SSL certificate to appear legitimate. The domain has not yet been widely listed on major blocklists but exhibits low trust scores due to its recent creation and suspicious naming conventions.

To mitigate risk, immediately block rpcconnect.info at network and endpoint levels using DNS filtering or host file modifications. Avoid all interactions with this domain, including clicking links or downloading files. Report any accidental exposure to your security team for incident response. If you suspect credential compromise, revoke affected RPC portal access tokens immediately and audit authentication logs for anomalies.