re-verifyrpc[.]pages[.]dev

The domain re-verifyrpc.pages.dev has been confirmed as a credential phishing site. It impersonates a wallet verification page, likely targeting users of cryptocurrency services. The domain uses a combination of modern web technologies, including React, jsDelivr, HSTS, EmailJS, and Cloudflare, to create a convincing and secure-looking environment that can trick users into providing sensitive information.

Analysis indicates that the domain has a VirusTotal detection score of 9/95, suggesting that while it is flagged by a significant number of security vendors, it may still evade some detection mechanisms. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. It was created on May 28, 2025, and currently appears on one security blocklist. The site has an HSTS header, which can enhance the security perception and make it more difficult for users to identify the phishing attempt. The SSL certificate is issued by Google Trust Services, further adding to the site's credibility.

The domain is currently offline, which may indicate that it has been taken down by security researchers or the registrar. Despite this, the risk remains elevated due to the potential for the domain to be reactivated or repurposed. Organizations and individuals should continue to monitor for any re-emergence of this domain and take appropriate measures to protect against credential theft. Users are advised to verify the legitimacy of any wallet verification requests through official channels and to report any suspicious activity to their security teams.