rpcnodesupdate[.]net

The domain rpcnodesupdate.net is a phishing site engaged in brand impersonation targeting the Avalanche cryptocurrency platform. It presents itself as an RPC node update portal to deceive users into disclosing sensitive information or executing unauthorized transactions. No drainer kit was identified, but the site was actively used for cryptocurrency-related scams. As of the latest verification, rpcnodesupdate.net has been taken offline, though prior activity classifies it as an elevated-risk threat.

Technical indicators confirm the malicious nature of rpcnodesupdate.net. The domain was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai, and appears on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. Registered through NameSilo, LLC on June 25, 2025, it resolved to the IP address 172.67.175.198, hosted by Cloudflare, Inc. in the US. The SSL certificate was issued by WE1, and the observed page title was 'Update RPC'. Google Safe Browsing did not flag the domain, but Gridinsoft assigned it a trust score of 0/100, reinforcing its classification as a phishing site.

Users who interacted with rpcnodesupdate.net should immediately revoke any token approvals granted during the session and transfer funds to a new, secure wallet. Enable two-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. Report the domain to relevant platforms, including the impersonated brand Avalanche, and submit it to additional blocklists such as PhishTank or OpenPhish. If credentials were entered, change passwords immediately and watch for signs of fraud or account compromise.