platform[.]rmkcapital[.]online

PhishDestroy identifies platform.rmkcapital.online as a generic phishing domain impersonating Webtrader, a trading platform interface, through a fraudulent web interface designed to harvest credentials or financial data. The page title 'Webtrader' suggests an attempt to mimic legitimate trading dashboards, likely leveraging social engineering to trick users into entering sensitive account details. No known drainer kit signatures were detected in available intelligence at the time of analysis, but the presence of a trading interface implies a high likelihood of credential theft or financial fraud operations.

This domain was flagged with a generic phishing threat vector and remains under investigation despite 0 detections on VirusTotal (11/95). It was registered through NameSilo, LLC, resolved to IP 103.155.93.207, and utilizes an SSL certificate issued by Sectigo Limited. The domain was created on March 13, 2026, which indicates recent registration, and it is currently active and unblocked by Google Safe Browsing (GSB status: unflagged, blocklist count: 0). These technical indicators highlight a newly active but operationally stealthy threat actor leveraging fresh infrastructure to avoid immediate detection.

As of the latest scan, platform.rmkcapital.online remains active with no active takedown or blocklist inclusion. Response actions include ongoing monitoring and intelligence enrichment, but the current risk level remains under investigation due to the absence of detections and low blocklist presence. Users are advised to avoid interacting with this domain, verify all financial platforms via official channels, and report any encountered instances to threat intelligence platforms. The lack of detection suggests this campaign may be in early stages or employing evasion techniques, maintaining a latent risk to potential victims.