multirbx[.]at

This domain, multirbx.at, is currently flagged as an active generic phishing site. VirusTotal analysis shows that 2 of 91 security vendors have identified the domain as malicious, indicating that at least a small subset of scanners have observed phishing‑related behavior. The domain is also listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

No additional public intelligence such as registrar details, hosting IP address, SSL certificate information, HTTP response codes, Safe Browsing status, OTX identifiers, or page title has been released in the available feed, so the underlying infrastructure remains opaque. The limited detection footprint suggests the campaign may be in early stages or employing low‑profile hosting, but the presence on a reputable blocklist confirms that the domain is being used to deliver phishing content. Defenders should prioritize immediate containment: add multirbx.at to network‑level deny lists, enforce URL filtering rules that block the domain, and ensure endpoint protection solutions receive the latest indicator updates.

Continuous monitoring of DNS queries and outbound traffic for connections to the domain is advised, as well as periodic re‑scanning with sandbox tools to capture any evolving payloads. Given the scarcity of contextual data, threat hunters should also query passive DNS and WHOIS services for any new registration changes that could clarify the threat actor’s infrastructure. Until further evidence emerges, treating multirbx.at as a high‑confidence phishing indicator is recommended.