rpc-serverguide[.]pages[.]dev

The domain rpc-serverguide.pages.dev is identified as a high-risk brand impersonation threat targeting the Arbitrum brand. No specific drainer kit has been detected on this domain, but it appears to be designed to trick users into providing sensitive information, potentially leading to financial loss or credential theft.

Technical analysis reveals that rpc-serverguide.pages.dev has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a low but significant detection rate. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.198, which is located in the United States under the AS13335 Cloudflare, Inc. network. The domain was created on July 15, 2025, and the SSL certificate is issued by Google Trust Services / WE1. It appears on two security blocklists, PhishDestroy and ScamSniffer, further confirming its malicious nature.

The domain is currently active and remains a threat. Users are advised to avoid interacting with this domain and to report any suspicious activity to the relevant authorities. Organizations should implement additional security measures such as DNS filtering and user education to mitigate the risk of credential theft and financial loss. The remaining risk is high due to the domain's ability to impersonate a trusted brand and the potential for ongoing attacks.