rtxfi[.]one

PhishDestroy identifies rtxfi.one as an active fake crypto wallet phishing domain designed to steal cryptocurrency wallet credentials and funds. This site mimics legitimate crypto service interfaces to trick users into entering private keys or connecting wallets, enabling attackers to drain assets directly. The threat is elevated due to confirmed blocklist presence and blocking by security tools like MetaMask and SEAL, indicating widespread malicious behavior. Users who interact with this domain risk immediate financial loss. This domain was flagged by 1 out of 95 VirusTotal security vendors and is blocked by MetaMask and SEAL. The SSL certificate is issued by Google Trust Services, which does not guarantee legitimacy. The domain appears on multiple security blocklists, signaling widespread recognition as a malicious actor. While the exact creation date is not provided, the presence of an SSL certificate from a trusted issuer suggests recent deployment aimed at exploiting current user trust in crypto services. If you visited rtxfi.one, immediately disconnect any connected wallets and revoke any permissions granted. Scan your device with updated antivirus software and change passwords for all crypto-related accounts. Use a hardware wallet for critical assets and verify all URLs manually before entering sensitive information. Report the domain to your security provider and avoid interacting with any pop-ups or unverified links from this site.