rbcexpress[.]support

PhishDestroy has identified rbcexpress.support as a dangerous phishing domain that attempts to steal login credentials by impersonating RBC Express, a legitimate online banking platform for businesses. Visitors to this site may be tricked into entering sensitive financial information, which could lead to unauthorized account access and fraud. The domain is currently offline, but similar threats may appear under different names.

The evidence against this domain is substantial. VirusTotal reports that 15 out of 95 security vendors flagged the site as malicious, and it appears on 1 security blocklist. The domain was created on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar known for hosting questionable domains. It resolves to IP address 147.45.199.152 and has no SSL certificate, making any data transmitted vulnerable to interception. PhishDestroy's analysis confirms the page title matches the domain name, a common tactic in brand impersonation attacks.

If you have visited rbcexpress.support, do not enter any information. Immediately change your RBC Express password and enable two-factor authentication if available. Monitor your accounts for suspicious activity and contact your financial institution. Use PhishDestroy's verification tool to check the safety of any similar domains you encounter. Stay vigilant against phishing attempts that exploit trust in well-known brands.