pools-raacfi[.]xyz

The domain pools-raacfi.xyz is currently classified as an active generic phishing infrastructure with an elevated risk rating as of August 04, 2026. Threat intelligence records indicate that the domain has been blocked by three independent mitigation services: PhishDestroy, MetaMask, and SEAL, demonstrating that multiple security products have identified it as malicious. Additionally, the domain appears on three external blocklists, reinforcing its reputation as a hostile web resource.

VirusTotal analysis shows that five of ninety‑one security vendors submitted detections for the domain, providing further corroboration of malicious intent despite a relatively low detection count. No other technical artifacts such as registrar details, hosting IP, SSL certificates, or page titles have been disclosed, leaving the underlying infrastructure opaque. Consequently, analysts cannot confirm the specific phishing kit, targeted brand, or the exact payload delivered to victims.

Defenders are advised to add pools-raacfi.xyz to local blocklists, enforce DNS‑level filtering, and monitor outbound traffic for connections to the domain. Network security teams should also update intrusion‑detection signatures to flag any HTTP or TLS handshake attempts involving this host. Given the active status and elevated risk, continuous observation is recommended to capture any future changes in detection patterns or additional intelligence that may clarify the campaign’s scope.