getrxusd[.]xyz

The domain getrxusd.xyz is currently identified as a high-risk generic phishing domain and remains active. It appears to impersonate a financial service or cryptocurrency platform, potentially targeting users seeking liquidity, utility, and earnings through Real-World Assets (RWAs). The domain's page title, 'RXUSD — Unlocking RWAs for Liquidity, Utility and Earning,' suggests an attempt to appear legitimate and trustworthy.

Analysis indicates that getrxusd.xyz is flagged by 5 of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.97.3. It appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. The domain's creation date is not provided, but its recent activity and presence on multiple blocklists suggest it is a relatively new threat.

The domain getrxusd.xyz is currently active and poses a significant risk to users. Security experts recommend avoiding any interaction with this domain to prevent potential phishing attacks and data breaches. Network administrators should consider adding this domain to their firewall and DNS blocklists. Users are advised to verify the authenticity of any financial or cryptocurrency service through official channels and to report any suspicious activity to their respective security teams.