interac-rbcloginclient[.]com

Analysis of interac-rbcloginclient.com shows a credential‑phishing infrastructure that has been taken offline as of the report date, July 24, 2026. The domain was registered through MAT BAO CORPORATION on 06 November 2025 and resolves to the Cloudflare address 172.67.209.182, identified as belonging to AS13335 in the United States. The TLS certificate presented for the site is identified as WE1, indicating a publicly‑issued certificate rather than a self‑signed or expired one. The page title returned by the web server is "RBC Royal Bank," matching the advertised target but no further page content has been disclosed.

Detection services have flagged the domain: 12 of 93 security vendors on VirusTotal raise alerts, and AlienVault OTX lists the domain in 14 separate threat‑intel pulses. It appears on a single security blocklist and is actively blocked by PhishDestroy. Gridinsoft’s trust score is 0 / 100, reinforcing the malicious assessment. The elevated risk level is consistent with the observed evidence.

Uncertainty remains around the specific phishing kit or the exact method of credential harvest, as no detailed payload or landing‑page capture data has been released. Defenders should update URL filtering and domain blocklists to include interac-rbcloginclient.com, monitor for any re‑use of the associated IP address or TLS certificate, and continue to reference the VirusTotal and OTX indicators for broader correlation. Further threat‑intel collection is advised if the domain resurfaces or if related infrastructure is observed.