rcadevm[.]xyz

The domain rcadevm.xyz is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, rcadevm.xyz has been taken offline, reducing immediate risk but not eliminating the potential for future malicious use.

Technical indicators confirm rcadevm.xyz as a low-reputation domain. VirusTotal reports 2 of 95 security vendors flagged the domain, including alphaMountain.ai and Forcepoint ThreatSeeker. The domain appears on 1 security blocklist, specifically PhishDestroy. Created on February 21, 2026, rcadevm.xyz resolves to the IPv6 address 2606:4700:3030::6815:1001, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title was 'Nur einen Moment…'. Gridinsoft assigned a trust score of 0/100, further indicating its malicious nature.

Users who may have interacted with rcadevm.xyz should immediately change any passwords or credentials entered on the site, particularly for financial or email accounts. Enable two-factor authentication (2FA) where available to add an extra layer of security. Monitor accounts for unauthorized activity, such as unfamiliar transactions or login attempts. Report the domain to relevant authorities, including the Federal Trade Commission (FTC) at reportfraud.ftc.gov or your local cybercrime unit. Additionally, submit the domain to Google Safe Browsing via their reporting tool to help protect others from potential harm.